Overview

overview

7

Static

static

3

2024-01-10...py.exe

windows7-x64

7

2024-01-10...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-10_e4377a22e0ff6f6439ce954c0983754c_mafia_nionspy

  • Size

    288KB

  • Sample

    240111-gn6zqsahe8

  • MD5

    e4377a22e0ff6f6439ce954c0983754c

  • SHA1

    4c8810eaf5272fa2962231e313f1ba20fa4b9946

  • SHA256

    6923d63d13c200b93b8825fadcfe1016065350da7c9c5597165bfa31c74c465c

  • SHA512

    c8d72198b9dcf71b7181988daece0b462566e4748c8c8b84894135cb5be3ab699b8cec0cc116635f21a7b798a9ed8e7c50799cf40455fe4461a54ae3aef81dfb

  • SSDEEP

    6144:RQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:RQMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-01-10_e4377a22e0ff6f6439ce954c0983754c_mafia_nionspy

    • Size

      288KB

    • MD5

      e4377a22e0ff6f6439ce954c0983754c

    • SHA1

      4c8810eaf5272fa2962231e313f1ba20fa4b9946

    • SHA256

      6923d63d13c200b93b8825fadcfe1016065350da7c9c5597165bfa31c74c465c

    • SHA512

      c8d72198b9dcf71b7181988daece0b462566e4748c8c8b84894135cb5be3ab699b8cec0cc116635f21a7b798a9ed8e7c50799cf40455fe4461a54ae3aef81dfb

    • SSDEEP

      6144:RQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:RQMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks