Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-15_1e0678d36bb6c1c3cd7397b6e27bca9d_mafia_nionspy
-
Size
280KB
-
Sample
240315-lq4plsfd39
-
MD5
1e0678d36bb6c1c3cd7397b6e27bca9d
-
SHA1
5d57c2f06d328c00e31ceb1a7e364f8b5e3bdfe4
-
SHA256
45a0aa9c2d2d659bb97b37090ed605f862cfc0e9ee0ebdf7814f429046e19ff2
-
SHA512
be61c1def6fc57d9fe6739c1a33cf4f9f1ccf8005cfd6c3b2f1c641043861b2b90d8ab98b4087e201f2d9191d7596262f7012fad78b01b16671cea2a984e6cc4
-
SSDEEP
6144:RQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:RQMyfmNFHfnWfhLZVHmOog
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-15_1e0678d36bb6c1c3cd7397b6e27bca9d_mafia_nionspy.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-15_1e0678d36bb6c1c3cd7397b6e27bca9d_mafia_nionspy.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-15_1e0678d36bb6c1c3cd7397b6e27bca9d_mafia_nionspy
-
Size
280KB
-
MD5
1e0678d36bb6c1c3cd7397b6e27bca9d
-
SHA1
5d57c2f06d328c00e31ceb1a7e364f8b5e3bdfe4
-
SHA256
45a0aa9c2d2d659bb97b37090ed605f862cfc0e9ee0ebdf7814f429046e19ff2
-
SHA512
be61c1def6fc57d9fe6739c1a33cf4f9f1ccf8005cfd6c3b2f1c641043861b2b90d8ab98b4087e201f2d9191d7596262f7012fad78b01b16671cea2a984e6cc4
-
SSDEEP
6144:RQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:RQMyfmNFHfnWfhLZVHmOog
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-