Overview

overview

7

Static

static

3

2024-01-27...py.exe

windows7-x64

7

2024-01-27...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-27_5122529815fbaa316255966e87becab6_mafia_nionspy

  • Size

    327KB

  • Sample

    240127-btgzxaadc7

  • MD5

    5122529815fbaa316255966e87becab6

  • SHA1

    9ebb8604e0222b8d0aed7c151314666e7468bbc8

  • SHA256

    9488557b48f89bf068b106f0ec329e8761cc736f742916380d771f05f3ac83c3

  • SHA512

    bf9c7db7434f21a2c6c4dc0973c7b8d43cf865bc690c8d084d609b828fcb2dd31e88fd12c5bae32d711bd1192e3af866d4ee2d8a29a1caaf672b4ac6f3099313

  • SSDEEP

    6144:p2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:p2TFafJiHCWBWPMjVWrXK0

Score
7/10

Malware Config

Targets

    • Target

      2024-01-27_5122529815fbaa316255966e87becab6_mafia_nionspy

    • Size

      327KB

    • MD5

      5122529815fbaa316255966e87becab6

    • SHA1

      9ebb8604e0222b8d0aed7c151314666e7468bbc8

    • SHA256

      9488557b48f89bf068b106f0ec329e8761cc736f742916380d771f05f3ac83c3

    • SHA512

      bf9c7db7434f21a2c6c4dc0973c7b8d43cf865bc690c8d084d609b828fcb2dd31e88fd12c5bae32d711bd1192e3af866d4ee2d8a29a1caaf672b4ac6f3099313

    • SSDEEP

      6144:p2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:p2TFafJiHCWBWPMjVWrXK0

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks