Overview

overview

7

Static

static

3

2024-01-11...py.exe

windows7-x64

7

2024-01-11...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-11_9c4a5109c35ca42b40d42fb5f4dca405_mafia_nionspy

  • Size

    280KB

  • Sample

    240112-gr5wvaade8

  • MD5

    9c4a5109c35ca42b40d42fb5f4dca405

  • SHA1

    1a6c421f72ed6b3bd0d9418ffca279d37dd6655f

  • SHA256

    e3fb653031ad27cc238811537cc062ee3c8240e3dc9faea8a047359fa97afc3b

  • SHA512

    1bd719b8b03b111f954d1db76e589f546b1d6731571f6897ba37df85b7787b6abf81d4f01399318263c032a9f001960237f6b736842fcfeddf460f2a71b4c2db

  • SSDEEP

    6144:OTz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDK:OTBPFV0RyWl3h2E+7pl

Score
7/10

Malware Config

Targets

    • Target

      2024-01-11_9c4a5109c35ca42b40d42fb5f4dca405_mafia_nionspy

    • Size

      280KB

    • MD5

      9c4a5109c35ca42b40d42fb5f4dca405

    • SHA1

      1a6c421f72ed6b3bd0d9418ffca279d37dd6655f

    • SHA256

      e3fb653031ad27cc238811537cc062ee3c8240e3dc9faea8a047359fa97afc3b

    • SHA512

      1bd719b8b03b111f954d1db76e589f546b1d6731571f6897ba37df85b7787b6abf81d4f01399318263c032a9f001960237f6b736842fcfeddf460f2a71b4c2db

    • SSDEEP

      6144:OTz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDK:OTBPFV0RyWl3h2E+7pl

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks