Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-25_54c242885a6aeffd642918a3851b390a_mafia_nionspy
-
Size
344KB
-
Sample
240425-f79djagb9y
-
MD5
54c242885a6aeffd642918a3851b390a
-
SHA1
85133557f19905fc2c886e7e8e1c808f8819971c
-
SHA256
c63db7e699b980a80d6e34f860029e3e5e901312679031b0a07f9706833201b4
-
SHA512
210c10e2157fc039e909dffce260416703f73cf00d256a21f33f74d9cb27db382f0d489d0744b5e2169676c963c4709606ee3fc8ab69667c37ee1a00a09ff2e9
-
SSDEEP
6144:TTz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:TTBPFV0RyWl3h2E+7pYm0
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-25_54c242885a6aeffd642918a3851b390a_mafia_nionspy.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-25_54c242885a6aeffd642918a3851b390a_mafia_nionspy.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-25_54c242885a6aeffd642918a3851b390a_mafia_nionspy
-
Size
344KB
-
MD5
54c242885a6aeffd642918a3851b390a
-
SHA1
85133557f19905fc2c886e7e8e1c808f8819971c
-
SHA256
c63db7e699b980a80d6e34f860029e3e5e901312679031b0a07f9706833201b4
-
SHA512
210c10e2157fc039e909dffce260416703f73cf00d256a21f33f74d9cb27db382f0d489d0744b5e2169676c963c4709606ee3fc8ab69667c37ee1a00a09ff2e9
-
SSDEEP
6144:TTz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:TTBPFV0RyWl3h2E+7pYm0
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-