Overview

overview

7

Static

static

3

2024-01-22...py.exe

windows7-x64

7

2024-01-22...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-22_7021c0c9f9150e0d21b4bb128b57eac5_mafia_nionspy

  • Size

    288KB

  • Sample

    240122-wa9k2abeal

  • MD5

    7021c0c9f9150e0d21b4bb128b57eac5

  • SHA1

    f25f18740847ebdf915dfe9031840c44c6010aa4

  • SHA256

    6853a2113671c80819f918d408b782a555d02ec678685871a709b0671bf3dcac

  • SHA512

    ba691eecb520b7487b4f7f51fa58ad638910d68e3325fb0b281d0f010463fa47c61de3ab8c6bc0b10afc890efe515b2589178ea9616bb4c77d2df64667acb97e

  • SSDEEP

    6144:FQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:FQMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-01-22_7021c0c9f9150e0d21b4bb128b57eac5_mafia_nionspy

    • Size

      288KB

    • MD5

      7021c0c9f9150e0d21b4bb128b57eac5

    • SHA1

      f25f18740847ebdf915dfe9031840c44c6010aa4

    • SHA256

      6853a2113671c80819f918d408b782a555d02ec678685871a709b0671bf3dcac

    • SHA512

      ba691eecb520b7487b4f7f51fa58ad638910d68e3325fb0b281d0f010463fa47c61de3ab8c6bc0b10afc890efe515b2589178ea9616bb4c77d2df64667acb97e

    • SSDEEP

      6144:FQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:FQMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks