Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-04-21...py.exe

windows7-x64

7

2024-04-21...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-21_259804c7f131c9018839488e1bfc420e_mafia_nionspy

  • Size

    328KB

  • Sample

    240421-tw9rtafa54

  • MD5

    259804c7f131c9018839488e1bfc420e

  • SHA1

    3602ab2482c9fd54670154e302217a687ae36f84

  • SHA256

    234284fee2df1769ab5ce6ecb81329ab63e1f674f1fe9ae500823a1bdb8b41f9

  • SHA512

    81f576a282fadd14cb56e1538ac49e08cd4475737f37e86b56b422e68c248b7fe2a47bb340176e7d65d9ce15619f27006ab9b4868ae0793b481c6aa7faead5e5

  • SSDEEP

    6144:V2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG89gkPzDh1v:V2TFafJiHCWBWPMjVWrXf1v

Score
7/10

Malware Config

Targets

    • Target

      2024-04-21_259804c7f131c9018839488e1bfc420e_mafia_nionspy

    • Size

      328KB

    • MD5

      259804c7f131c9018839488e1bfc420e

    • SHA1

      3602ab2482c9fd54670154e302217a687ae36f84

    • SHA256

      234284fee2df1769ab5ce6ecb81329ab63e1f674f1fe9ae500823a1bdb8b41f9

    • SHA512

      81f576a282fadd14cb56e1538ac49e08cd4475737f37e86b56b422e68c248b7fe2a47bb340176e7d65d9ce15619f27006ab9b4868ae0793b481c6aa7faead5e5

    • SSDEEP

      6144:V2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG89gkPzDh1v:V2TFafJiHCWBWPMjVWrXf1v

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks