Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-03-10...py.exe

windows7-x64

7

2024-03-10...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-10_bf5d1254432452c992ccfa26e463a4bf_mafia_nionspy

  • Size

    288KB

  • Sample

    240310-rr4c5aee71

  • MD5

    bf5d1254432452c992ccfa26e463a4bf

  • SHA1

    e11c008a9fef9e432e2aa99c2aecf2bb6acb5711

  • SHA256

    4a67917e897e4d86e9f83712078658fec85618e418727c197e11c1d77f7798c6

  • SHA512

    f746f83afdee240716e35d121845de5eb84e347842c41549bde0c5b218ba9f81bc009d83cae4718b0737fdd89c0e63313aba78944389901a599b07fbe712454c

  • SSDEEP

    6144:sQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:sQMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-03-10_bf5d1254432452c992ccfa26e463a4bf_mafia_nionspy

    • Size

      288KB

    • MD5

      bf5d1254432452c992ccfa26e463a4bf

    • SHA1

      e11c008a9fef9e432e2aa99c2aecf2bb6acb5711

    • SHA256

      4a67917e897e4d86e9f83712078658fec85618e418727c197e11c1d77f7798c6

    • SHA512

      f746f83afdee240716e35d121845de5eb84e347842c41549bde0c5b218ba9f81bc009d83cae4718b0737fdd89c0e63313aba78944389901a599b07fbe712454c

    • SSDEEP

      6144:sQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:sQMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks