Overview

overview

7

Static

static

3

2024-01-10...py.exe

windows7-x64

7

2024-01-10...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-10_50b27206b6ca415ceb8973d251b20a20_mafia_nionspy

  • Size

    288KB

  • Sample

    240111-gjckbsgdhk

  • MD5

    50b27206b6ca415ceb8973d251b20a20

  • SHA1

    13b689521070301e3a3945f7e805795b5a363441

  • SHA256

    fd6a7c693fd2678f4105600f6d5926b826e8b326743679d5f368f8ed92f58cd9

  • SHA512

    7d16a02f8662e183065618a1a2e91655e787bd14048ef092b0c8381139aeebf636cf5caf66a7abff12f64d23b142c2b56ddb5960f76e01e7219578ec1640e4bb

  • SSDEEP

    6144:UQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:UQMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-01-10_50b27206b6ca415ceb8973d251b20a20_mafia_nionspy

    • Size

      288KB

    • MD5

      50b27206b6ca415ceb8973d251b20a20

    • SHA1

      13b689521070301e3a3945f7e805795b5a363441

    • SHA256

      fd6a7c693fd2678f4105600f6d5926b826e8b326743679d5f368f8ed92f58cd9

    • SHA512

      7d16a02f8662e183065618a1a2e91655e787bd14048ef092b0c8381139aeebf636cf5caf66a7abff12f64d23b142c2b56ddb5960f76e01e7219578ec1640e4bb

    • SSDEEP

      6144:UQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:UQMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks