Overview

overview

7

Static

static

3

2024-01-11...py.exe

windows7-x64

7

2024-01-11...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-11_184666f4241e3889877ff11f1bd3d467_mafia_nionspy

  • Size

    344KB

  • Sample

    240112-gmr47agaak

  • MD5

    184666f4241e3889877ff11f1bd3d467

  • SHA1

    55e850b729805b886950453c7d9448ed5eeab7c7

  • SHA256

    d30ac2cac0faab0c3a73b548aef1fdc1150ff546f273125eaf8d9aad86ad510d

  • SHA512

    722094022dd73b6dfdacadfa91045fb5d31ea37044c51f5ea00e0726f060fcecd947314fd1478f55705b2e1a0c3619ce59a1437ed1733151c8b2397b912f7435

  • SSDEEP

    6144:2Tz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:2TBPFV0RyWl3h2E+7pYm0

Score
7/10

Malware Config

Targets

    • Target

      2024-01-11_184666f4241e3889877ff11f1bd3d467_mafia_nionspy

    • Size

      344KB

    • MD5

      184666f4241e3889877ff11f1bd3d467

    • SHA1

      55e850b729805b886950453c7d9448ed5eeab7c7

    • SHA256

      d30ac2cac0faab0c3a73b548aef1fdc1150ff546f273125eaf8d9aad86ad510d

    • SHA512

      722094022dd73b6dfdacadfa91045fb5d31ea37044c51f5ea00e0726f060fcecd947314fd1478f55705b2e1a0c3619ce59a1437ed1733151c8b2397b912f7435

    • SSDEEP

      6144:2Tz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:2TBPFV0RyWl3h2E+7pYm0

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks