Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-04-16...py.exe

windows7-x64

7

2024-04-16...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-16_54eb5d652b287e4f5cbcbf325b8824b6_mafia_nionspy

  • Size

    348KB

  • Sample

    240416-yqzrwacg4z

  • MD5

    54eb5d652b287e4f5cbcbf325b8824b6

  • SHA1

    9f06c819d22719e2a3f0a3d1878d03da83d624ec

  • SHA256

    c6465112198ad170d048979acafe341b6c4968f0f9456c82762ec457942d66d7

  • SHA512

    da3cb0cfb980e7f14f0a2ffb36b536bc4cebf8c6d31f9e92d5fa345e2f38464280c09017db22771fbca26d212d2e714c39aabbbfd8cf6c52a3791af975d141d6

  • SSDEEP

    6144:V2+JS2sFZfI8U0obHCW/2a7XQcsPMjVWr289gkPzDhmv:V2TFZfJiHCWBWPMjVWrHfmv

Score
7/10

Malware Config

Targets

    • Target

      2024-04-16_54eb5d652b287e4f5cbcbf325b8824b6_mafia_nionspy

    • Size

      348KB

    • MD5

      54eb5d652b287e4f5cbcbf325b8824b6

    • SHA1

      9f06c819d22719e2a3f0a3d1878d03da83d624ec

    • SHA256

      c6465112198ad170d048979acafe341b6c4968f0f9456c82762ec457942d66d7

    • SHA512

      da3cb0cfb980e7f14f0a2ffb36b536bc4cebf8c6d31f9e92d5fa345e2f38464280c09017db22771fbca26d212d2e714c39aabbbfd8cf6c52a3791af975d141d6

    • SSDEEP

      6144:V2+JS2sFZfI8U0obHCW/2a7XQcsPMjVWr289gkPzDhmv:V2TFZfJiHCWBWPMjVWrHfmv

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks