Overview

overview

7

Static

static

3

2024-01-28...py.exe

windows7-x64

7

2024-01-28...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-28_bfd2b0ce271fed0334758dd9f55f06f5_mafia_nionspy

  • Size

    344KB

  • Sample

    240128-sx4fraecgk

  • MD5

    bfd2b0ce271fed0334758dd9f55f06f5

  • SHA1

    ef70a6437c26dedf161c1bfe66abe33a5b948f0f

  • SHA256

    056119118c4c5d0373ad66dded0224c6676fbf874e420d0bb4ec0705ff89c224

  • SHA512

    d82758fb41c78d5da316fc99ab3dd5ce99467c6cd283692a940c9378efcf3438d5a361bce967b511c5c632e3c586a5855b423573b0a2a90a2facf8d774a9efc4

  • SSDEEP

    6144:UTz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:UTBPFV0RyWl3h2E+7pYm0

Score
7/10

Malware Config

Targets

    • Target

      2024-01-28_bfd2b0ce271fed0334758dd9f55f06f5_mafia_nionspy

    • Size

      344KB

    • MD5

      bfd2b0ce271fed0334758dd9f55f06f5

    • SHA1

      ef70a6437c26dedf161c1bfe66abe33a5b948f0f

    • SHA256

      056119118c4c5d0373ad66dded0224c6676fbf874e420d0bb4ec0705ff89c224

    • SHA512

      d82758fb41c78d5da316fc99ab3dd5ce99467c6cd283692a940c9378efcf3438d5a361bce967b511c5c632e3c586a5855b423573b0a2a90a2facf8d774a9efc4

    • SSDEEP

      6144:UTz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:UTBPFV0RyWl3h2E+7pYm0

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks