Overview

overview

7

Static

static

3

2024-02-04...py.exe

windows7-x64

7

2024-02-04...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-04_9db761b8da4c4dbd08cb8ee4aa80a199_mafia_nionspy

  • Size

    328KB

  • Sample

    240204-ec89lsbbfk

  • MD5

    9db761b8da4c4dbd08cb8ee4aa80a199

  • SHA1

    d898b58bf7b606c1c508eeadee83db047f051129

  • SHA256

    9363fc7a67fd6de266c0638fa9d12f0fe591983b70a3375899bf8562dfcdc024

  • SHA512

    3970f24c0512b9fd39d7573b87bdc3a18945b2439cd68bd4f58cacaab9bc7bead584f8a18c1a3b764c1f8a7192cdec901871c7a1e832d6e4b50ea1535b2af432

  • SSDEEP

    6144:z2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG89gkPzDh1v:z2TFafJiHCWBWPMjVWrXf1v

Score
7/10

Malware Config

Targets

    • Target

      2024-02-04_9db761b8da4c4dbd08cb8ee4aa80a199_mafia_nionspy

    • Size

      328KB

    • MD5

      9db761b8da4c4dbd08cb8ee4aa80a199

    • SHA1

      d898b58bf7b606c1c508eeadee83db047f051129

    • SHA256

      9363fc7a67fd6de266c0638fa9d12f0fe591983b70a3375899bf8562dfcdc024

    • SHA512

      3970f24c0512b9fd39d7573b87bdc3a18945b2439cd68bd4f58cacaab9bc7bead584f8a18c1a3b764c1f8a7192cdec901871c7a1e832d6e4b50ea1535b2af432

    • SSDEEP

      6144:z2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG89gkPzDh1v:z2TFafJiHCWBWPMjVWrXf1v

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks