Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-07-27_8e97205ff2b4c29bc253a8cb08b1858b_mafia_nionspy

  • Size

    280KB

  • Sample

    240727-mlnchavcll

  • MD5

    8e97205ff2b4c29bc253a8cb08b1858b

  • SHA1

    d2413d69ef34002232f2ad23fd6e2b2c19075a98

  • SHA256

    67200d1e8209bf9bfd567af74037956155faabf59d777588a03b879e706cefa4

  • SHA512

    6a19cd24ccb67fe7ebbbf68e0efde5ef2225884373bc98ca358c9d7edb8cce2d814f28a028781a8002e98e201237bd980e97b5439f39063127f59aa3d0545ff8

  • SSDEEP

    6144:0Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:0QMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-07-27_8e97205ff2b4c29bc253a8cb08b1858b_mafia_nionspy

    • Size

      280KB

    • MD5

      8e97205ff2b4c29bc253a8cb08b1858b

    • SHA1

      d2413d69ef34002232f2ad23fd6e2b2c19075a98

    • SHA256

      67200d1e8209bf9bfd567af74037956155faabf59d777588a03b879e706cefa4

    • SHA512

      6a19cd24ccb67fe7ebbbf68e0efde5ef2225884373bc98ca358c9d7edb8cce2d814f28a028781a8002e98e201237bd980e97b5439f39063127f59aa3d0545ff8

    • SSDEEP

      6144:0Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:0QMyfmNFHfnWfhLZVHmOog

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks