Overview

overview

7

Static

static

3

2024-02-12...py.exe

windows7-x64

7

2024-02-12...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-12_146e4cf1a46eb3fea4da7d473540c501_mafia_nionspy

  • Size

    288KB

  • Sample

    240212-qnzp4aee6y

  • MD5

    146e4cf1a46eb3fea4da7d473540c501

  • SHA1

    857459095b1933255a8d7fdedfb2e31410ebaf97

  • SHA256

    f325c5e063d586e68c9830e92ee2d9e9aa334687265e83ead1ef2b65f7a600c7

  • SHA512

    133ebe84a517ac9975b2dd0ce23ef909ef869812affdcd3be1c28d07145346bee11fe3f2175724d4a935fe4cf254f14d051ddcf48d88e7939928b0957910f003

  • SSDEEP

    6144:nQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:nQMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-02-12_146e4cf1a46eb3fea4da7d473540c501_mafia_nionspy

    • Size

      288KB

    • MD5

      146e4cf1a46eb3fea4da7d473540c501

    • SHA1

      857459095b1933255a8d7fdedfb2e31410ebaf97

    • SHA256

      f325c5e063d586e68c9830e92ee2d9e9aa334687265e83ead1ef2b65f7a600c7

    • SHA512

      133ebe84a517ac9975b2dd0ce23ef909ef869812affdcd3be1c28d07145346bee11fe3f2175724d4a935fe4cf254f14d051ddcf48d88e7939928b0957910f003

    • SSDEEP

      6144:nQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:nQMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks