Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-03-16...py.exe

windows7-x64

7

2024-03-16...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-16_c8a4ec52a4ff355cc7c83f03d3dc60b1_mafia_nionspy

  • Size

    280KB

  • Sample

    240316-fnvq2aee22

  • MD5

    c8a4ec52a4ff355cc7c83f03d3dc60b1

  • SHA1

    319da3b07c14d8b653985592d9015abfb9f90835

  • SHA256

    34c47d04bf21e397b271abca355266356c90c743d842c4941c38f0bc21c00fc2

  • SHA512

    13ee3fea38f68d99de992f06fa391eee544c1ca109c3a88c30e4949a3c43963ec16b336a9c95063de560d7bc7ed763818443c30833d9a088e8435c8e3609899f

  • SSDEEP

    6144:5Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:5QMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-03-16_c8a4ec52a4ff355cc7c83f03d3dc60b1_mafia_nionspy

    • Size

      280KB

    • MD5

      c8a4ec52a4ff355cc7c83f03d3dc60b1

    • SHA1

      319da3b07c14d8b653985592d9015abfb9f90835

    • SHA256

      34c47d04bf21e397b271abca355266356c90c743d842c4941c38f0bc21c00fc2

    • SHA512

      13ee3fea38f68d99de992f06fa391eee544c1ca109c3a88c30e4949a3c43963ec16b336a9c95063de560d7bc7ed763818443c30833d9a088e8435c8e3609899f

    • SSDEEP

      6144:5Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:5QMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks