Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-09-08_8bfd1dd7dad6381c7644f4bcd2e28a56_mafia_nionspy

  • Size

    344KB

  • Sample

    240908-dgr1fs1glj

  • MD5

    8bfd1dd7dad6381c7644f4bcd2e28a56

  • SHA1

    6640158fc0b25c5aca86eeabb33fd92984723576

  • SHA256

    1dafa2d396944670c20ae276dbb1b4d1c422014636c4d9d7507635974c5f4cf4

  • SHA512

    2ffb207c78258d382a217696f1c3c2566975c89236978c53a33648fca318bbfba8b62c4019fbcae5e079226bb6b832204fdbe113748d8847528dd98e8cc878a8

  • SSDEEP

    6144:ETz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:ETBPFV0RyWl3h2E+7pYm0

Score
7/10

Malware Config

Targets

    • Target

      2024-09-08_8bfd1dd7dad6381c7644f4bcd2e28a56_mafia_nionspy

    • Size

      344KB

    • MD5

      8bfd1dd7dad6381c7644f4bcd2e28a56

    • SHA1

      6640158fc0b25c5aca86eeabb33fd92984723576

    • SHA256

      1dafa2d396944670c20ae276dbb1b4d1c422014636c4d9d7507635974c5f4cf4

    • SHA512

      2ffb207c78258d382a217696f1c3c2566975c89236978c53a33648fca318bbfba8b62c4019fbcae5e079226bb6b832204fdbe113748d8847528dd98e8cc878a8

    • SSDEEP

      6144:ETz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:ETBPFV0RyWl3h2E+7pYm0

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks