Overview

overview

7

Static

static

3

2024-02-19...py.exe

windows7-x64

7

2024-02-19...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-19_9c87bd50ba83458afadf4da6d949d14a_mafia_nionspy

  • Size

    344KB

  • Sample

    240219-v67wmsac32

  • MD5

    9c87bd50ba83458afadf4da6d949d14a

  • SHA1

    63532b1bb519d612259db80b99e7b956b42be9d9

  • SHA256

    23fc87d6af5b7ba5db66d63636a5423405917502ecf01580a360560aeba86ec9

  • SHA512

    56368807929bdbae116b5514cc18fe72dcb974c468e3d947ccf39eb4f9658dc028bb9d9b17555c786df60cf58bc56ab2759d347f1e8b302a1994f85e4494886e

  • SSDEEP

    6144:7Tz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:7TBPFV0RyWl3h2E+7pYm0

Score
7/10

Malware Config

Targets

    • Target

      2024-02-19_9c87bd50ba83458afadf4da6d949d14a_mafia_nionspy

    • Size

      344KB

    • MD5

      9c87bd50ba83458afadf4da6d949d14a

    • SHA1

      63532b1bb519d612259db80b99e7b956b42be9d9

    • SHA256

      23fc87d6af5b7ba5db66d63636a5423405917502ecf01580a360560aeba86ec9

    • SHA512

      56368807929bdbae116b5514cc18fe72dcb974c468e3d947ccf39eb4f9658dc028bb9d9b17555c786df60cf58bc56ab2759d347f1e8b302a1994f85e4494886e

    • SSDEEP

      6144:7Tz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:7TBPFV0RyWl3h2E+7pYm0

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks