Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-09_344173a95581c5e3c48e6c547250b9e2_mafia_nionspy
-
Size
280KB
-
Sample
240609-eegmdadc2w
-
MD5
344173a95581c5e3c48e6c547250b9e2
-
SHA1
5328e81169809aa4a1dcfb04efde7b71617f49ac
-
SHA256
b0d1b2bb645daffd5fbc37bb4dc14755b26e38024f6a6907e82d1b0ad5471072
-
SHA512
45f889b6ff275bc86510b66f28c5a7846f001ae4a71aaa2414edee08ecca670b7ae82b3ed3968c9cd67afafb3de5d16d1bda437f7e2041735f3363733d112bc9
-
SSDEEP
6144:uQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:uQMyfmNFHfnWfhLZVHmOog
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-09_344173a95581c5e3c48e6c547250b9e2_mafia_nionspy.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-06-09_344173a95581c5e3c48e6c547250b9e2_mafia_nionspy.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-09_344173a95581c5e3c48e6c547250b9e2_mafia_nionspy
-
Size
280KB
-
MD5
344173a95581c5e3c48e6c547250b9e2
-
SHA1
5328e81169809aa4a1dcfb04efde7b71617f49ac
-
SHA256
b0d1b2bb645daffd5fbc37bb4dc14755b26e38024f6a6907e82d1b0ad5471072
-
SHA512
45f889b6ff275bc86510b66f28c5a7846f001ae4a71aaa2414edee08ecca670b7ae82b3ed3968c9cd67afafb3de5d16d1bda437f7e2041735f3363733d112bc9
-
SSDEEP
6144:uQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:uQMyfmNFHfnWfhLZVHmOog
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-