Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-03-06...py.exe

windows7-x64

7

2024-03-06...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-06_a6ef4f2df17738c9716de45599d1c1e1_mafia_nionspy

  • Size

    280KB

  • Sample

    240306-czbkraaa72

  • MD5

    a6ef4f2df17738c9716de45599d1c1e1

  • SHA1

    3c6c21f8f7e5d83ed33d2432e0be4cbc55e7a48c

  • SHA256

    0621ef22885777df9c78aab03cf0e5359dbf5bafa8792aea834207a231fdffb3

  • SHA512

    92d0ed47c4661c6de555175ec016725d5747e5e8c5845dbf4631af320f536fc1464f097a6cde41e60b106e1a6f0b48eb20205ec80dd8fe50bcef2617c51b6a14

  • SSDEEP

    6144:6Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:6QMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-03-06_a6ef4f2df17738c9716de45599d1c1e1_mafia_nionspy

    • Size

      280KB

    • MD5

      a6ef4f2df17738c9716de45599d1c1e1

    • SHA1

      3c6c21f8f7e5d83ed33d2432e0be4cbc55e7a48c

    • SHA256

      0621ef22885777df9c78aab03cf0e5359dbf5bafa8792aea834207a231fdffb3

    • SHA512

      92d0ed47c4661c6de555175ec016725d5747e5e8c5845dbf4631af320f536fc1464f097a6cde41e60b106e1a6f0b48eb20205ec80dd8fe50bcef2617c51b6a14

    • SSDEEP

      6144:6Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:6QMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks