Overview

overview

7

Static

static

3

2024-01-10...py.exe

windows7-x64

7

2024-01-10...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-10_5b88908e4e5ba6ff4a4170419998bb69_mafia_nionspy

  • Size

    288KB

  • Sample

    240111-gjq3qagfal

  • MD5

    5b88908e4e5ba6ff4a4170419998bb69

  • SHA1

    b19de88063b030c6023ee873c863235c21af6e83

  • SHA256

    ca4a9c097cb5f67093f1e286554face944b1c945a8c399422fc5fd5673d2ed0a

  • SHA512

    9bb21186597d770b24888eb98cfd60e6a78ba3e18f36d3da1fdb9f4f397aea565ddc77aff380938f9faae6cce5f926096c21c98ca1417610bef204f3977932a9

  • SSDEEP

    6144:PQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:PQMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-01-10_5b88908e4e5ba6ff4a4170419998bb69_mafia_nionspy

    • Size

      288KB

    • MD5

      5b88908e4e5ba6ff4a4170419998bb69

    • SHA1

      b19de88063b030c6023ee873c863235c21af6e83

    • SHA256

      ca4a9c097cb5f67093f1e286554face944b1c945a8c399422fc5fd5673d2ed0a

    • SHA512

      9bb21186597d770b24888eb98cfd60e6a78ba3e18f36d3da1fdb9f4f397aea565ddc77aff380938f9faae6cce5f926096c21c98ca1417610bef204f3977932a9

    • SSDEEP

      6144:PQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:PQMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks