Overview

overview

7

Static

static

3

2024-01-28...py.exe

windows7-x64

7

2024-01-28...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-28_e81d376b5a86fa6b49870a9efafc4ffd_mafia_nionspy

  • Size

    280KB

  • Sample

    240128-zf45aahhb5

  • MD5

    e81d376b5a86fa6b49870a9efafc4ffd

  • SHA1

    9cc3cefd965db66e811316ddcf0df2764d9b72e6

  • SHA256

    b75b1b36783f8e09411dbb366e1e1e6936dc6d36339e5dd0baad89e8646d49e1

  • SHA512

    47be397d80bd1d928ebe23c01b8220a2b6779887cdbae07573afaf3129afff7c1cac59fcba61a5a60efa3759bae7a835e3b9b70543a90d6e2833ce23e9b80a4c

  • SSDEEP

    6144:GQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:GQMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-01-28_e81d376b5a86fa6b49870a9efafc4ffd_mafia_nionspy

    • Size

      280KB

    • MD5

      e81d376b5a86fa6b49870a9efafc4ffd

    • SHA1

      9cc3cefd965db66e811316ddcf0df2764d9b72e6

    • SHA256

      b75b1b36783f8e09411dbb366e1e1e6936dc6d36339e5dd0baad89e8646d49e1

    • SHA512

      47be397d80bd1d928ebe23c01b8220a2b6779887cdbae07573afaf3129afff7c1cac59fcba61a5a60efa3759bae7a835e3b9b70543a90d6e2833ce23e9b80a4c

    • SSDEEP

      6144:GQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:GQMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks