Overview

overview

7

Static

static

3

2024-02-18...py.exe

windows7-x64

7

2024-02-18...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-18_8e9c11112cc3de712f6e5ed23107fc98_mafia_nionspy

  • Size

    327KB

  • Sample

    240218-c5cp1add96

  • MD5

    8e9c11112cc3de712f6e5ed23107fc98

  • SHA1

    018c36cab81588b31aa4fb922b0ddde320e1d9cb

  • SHA256

    3e173feadaccb3544092aeb76c4bcd85424718cc583b9f9c5e176fa50af7e2f7

  • SHA512

    ca4d76e846367d2e87c94cee7cbe03c499682bc6a3d349bc837bc12178ee9ce80832d8d8e5945bd76c45b056a8dbf4ad35827f2e3a8de6774b67fa443a16f544

  • SSDEEP

    6144:D2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:D2TFafJiHCWBWPMjVWrXK0

Score
7/10

Malware Config

Targets

    • Target

      2024-02-18_8e9c11112cc3de712f6e5ed23107fc98_mafia_nionspy

    • Size

      327KB

    • MD5

      8e9c11112cc3de712f6e5ed23107fc98

    • SHA1

      018c36cab81588b31aa4fb922b0ddde320e1d9cb

    • SHA256

      3e173feadaccb3544092aeb76c4bcd85424718cc583b9f9c5e176fa50af7e2f7

    • SHA512

      ca4d76e846367d2e87c94cee7cbe03c499682bc6a3d349bc837bc12178ee9ce80832d8d8e5945bd76c45b056a8dbf4ad35827f2e3a8de6774b67fa443a16f544

    • SSDEEP

      6144:D2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:D2TFafJiHCWBWPMjVWrXK0

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks