Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2024-04-28...py.exe

windows7-x64

7

2024-04-28...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-28_9da1535ab90319e996e2bed3b988e86d_mafia_nionspy

  • Size

    280KB

  • Sample

    240428-w1nq9aea9z

  • MD5

    9da1535ab90319e996e2bed3b988e86d

  • SHA1

    ecd84f7955b0f59d85eafbbe1be5523828b08819

  • SHA256

    3728f85dc7c5eba1d063c2c874a13274166db0b8b6dcf6bc1352ae2f197e3660

  • SHA512

    757a592067e58dc4b3465f6764c7160d12f97fd50dc4154a2e18444f3b1b90209f508926baf740829be876d034fcc8f8a8d3aa6d24c720e6c42d8c7a69e05ca5

  • SSDEEP

    6144:kTz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDK:kTBPFV0RyWl3h2E+7pl

Score
7/10

Malware Config

Targets

    • Target

      2024-04-28_9da1535ab90319e996e2bed3b988e86d_mafia_nionspy

    • Size

      280KB

    • MD5

      9da1535ab90319e996e2bed3b988e86d

    • SHA1

      ecd84f7955b0f59d85eafbbe1be5523828b08819

    • SHA256

      3728f85dc7c5eba1d063c2c874a13274166db0b8b6dcf6bc1352ae2f197e3660

    • SHA512

      757a592067e58dc4b3465f6764c7160d12f97fd50dc4154a2e18444f3b1b90209f508926baf740829be876d034fcc8f8a8d3aa6d24c720e6c42d8c7a69e05ca5

    • SSDEEP

      6144:kTz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDK:kTBPFV0RyWl3h2E+7pl

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks