Overview

overview

7

Static

static

3

2024-01-28...py.exe

windows7-x64

7

2024-01-28...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-28_7323d589b391404dcba57a561a702fdb_mafia_nionspy

  • Size

    327KB

  • Sample

    240128-jde5dafghk

  • MD5

    7323d589b391404dcba57a561a702fdb

  • SHA1

    955eebb9085178e7b517f4325585c197d8553894

  • SHA256

    da172f3e06a3da04a73b9f0ba9d2236019a969a81254ee60bf033379fc629102

  • SHA512

    c0842a9915e3e5acf90dd11bf327cca4ce61df649e25934fa57c24711066feca985f34c4e24d10b5528a2ff5df0202d7fcdc6601ae26c269a9e080b4ee23c1a8

  • SSDEEP

    6144:P2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:P2TFafJiHCWBWPMjVWrXK0

Score
7/10

Malware Config

Targets

    • Target

      2024-01-28_7323d589b391404dcba57a561a702fdb_mafia_nionspy

    • Size

      327KB

    • MD5

      7323d589b391404dcba57a561a702fdb

    • SHA1

      955eebb9085178e7b517f4325585c197d8553894

    • SHA256

      da172f3e06a3da04a73b9f0ba9d2236019a969a81254ee60bf033379fc629102

    • SHA512

      c0842a9915e3e5acf90dd11bf327cca4ce61df649e25934fa57c24711066feca985f34c4e24d10b5528a2ff5df0202d7fcdc6601ae26c269a9e080b4ee23c1a8

    • SSDEEP

      6144:P2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:P2TFafJiHCWBWPMjVWrXK0

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks