Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-10_30e9ff8c4a42fc4b32576f22b3431a79_mafia_nionspy

  • Size

    348KB

  • Sample

    240510-3phjesge7s

  • MD5

    30e9ff8c4a42fc4b32576f22b3431a79

  • SHA1

    1dcb87040aec5d42f73d5477e95d80dab354bb83

  • SHA256

    877e2493020ddb9a351bc2ffbf30dd46d6fe1159a3de898bffa66cbfd96d6b48

  • SHA512

    21dd058a4e3703905650fa50e5168246f50847af71a97f6b1fa60209dc34cbcc740f9183bd508b66844b89c350ca415c9f7356becaadae6276c0dc3d9ad13836

  • SSDEEP

    6144:T2+JS2sFZfI8U0obHCW/2a7XQcsPMjVWr289gkPzDhmv:T2TFZfJiHCWBWPMjVWrHfmv

Score
7/10

Malware Config

Targets

    • Target

      2024-05-10_30e9ff8c4a42fc4b32576f22b3431a79_mafia_nionspy

    • Size

      348KB

    • MD5

      30e9ff8c4a42fc4b32576f22b3431a79

    • SHA1

      1dcb87040aec5d42f73d5477e95d80dab354bb83

    • SHA256

      877e2493020ddb9a351bc2ffbf30dd46d6fe1159a3de898bffa66cbfd96d6b48

    • SHA512

      21dd058a4e3703905650fa50e5168246f50847af71a97f6b1fa60209dc34cbcc740f9183bd508b66844b89c350ca415c9f7356becaadae6276c0dc3d9ad13836

    • SSDEEP

      6144:T2+JS2sFZfI8U0obHCW/2a7XQcsPMjVWr289gkPzDhmv:T2TFZfJiHCWBWPMjVWrHfmv

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks