Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-29_a5fde98cae9a1bdaf178944db36f2dac_mafia_nionspy
-
Size
274KB
-
Sample
240429-pv8qxabb5y
-
MD5
a5fde98cae9a1bdaf178944db36f2dac
-
SHA1
fc704975fc96b873ba5e7e9eb8154c8dfbe1b26a
-
SHA256
43db7419f70eac0532b1645636810f0f564efbd8cff1c88f24c4c1b8cc7b4aaa
-
SHA512
417aa823d6cc1e6062513f54d7d033b98ff5c9bf9dc6b35f80ed82947c53db3fbf68cab645ffbe9a76505a477d91bf8e94c4990c7c0b5a9a83b3e506d3722cef
-
SSDEEP
6144:YYvZ6brUj+bvqHXSpWr2Kqz83Oad3Jg4PlPDIQ+KLzDDg:YYvEbrUjp3SpWggd3JBPlPDIQ3g
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-29_a5fde98cae9a1bdaf178944db36f2dac_mafia_nionspy.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-29_a5fde98cae9a1bdaf178944db36f2dac_mafia_nionspy.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-29_a5fde98cae9a1bdaf178944db36f2dac_mafia_nionspy
-
Size
274KB
-
MD5
a5fde98cae9a1bdaf178944db36f2dac
-
SHA1
fc704975fc96b873ba5e7e9eb8154c8dfbe1b26a
-
SHA256
43db7419f70eac0532b1645636810f0f564efbd8cff1c88f24c4c1b8cc7b4aaa
-
SHA512
417aa823d6cc1e6062513f54d7d033b98ff5c9bf9dc6b35f80ed82947c53db3fbf68cab645ffbe9a76505a477d91bf8e94c4990c7c0b5a9a83b3e506d3722cef
-
SSDEEP
6144:YYvZ6brUj+bvqHXSpWr2Kqz83Oad3Jg4PlPDIQ+KLzDDg:YYvEbrUjp3SpWggd3JBPlPDIQ3g
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-