Overview

overview

7

Static

static

3

2024-02-21...py.exe

windows7-x64

7

2024-02-21...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-21_928357232675420d8f9f981577b2a163_mafia_nionspy

  • Size

    327KB

  • Sample

    240221-vkxhsacb89

  • MD5

    928357232675420d8f9f981577b2a163

  • SHA1

    19c442b319a48297a999c6473db09efb05346f76

  • SHA256

    e93267381a5aa51413b5bfef8dc88e42e88e6709206a4a01b05e01172c552034

  • SHA512

    aebeedfdc981f1a4de9615bc0566b04636c0c9a4248af0f0f2f5a25bd897ddc2ec8ab5866edb0be25208ac457202c6ca9d2c1d5aa1dde85ed91f82b9732b5918

  • SSDEEP

    6144:k2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:k2TFafJiHCWBWPMjVWrXK0

Score
7/10

Malware Config

Targets

    • Target

      2024-02-21_928357232675420d8f9f981577b2a163_mafia_nionspy

    • Size

      327KB

    • MD5

      928357232675420d8f9f981577b2a163

    • SHA1

      19c442b319a48297a999c6473db09efb05346f76

    • SHA256

      e93267381a5aa51413b5bfef8dc88e42e88e6709206a4a01b05e01172c552034

    • SHA512

      aebeedfdc981f1a4de9615bc0566b04636c0c9a4248af0f0f2f5a25bd897ddc2ec8ab5866edb0be25208ac457202c6ca9d2c1d5aa1dde85ed91f82b9732b5918

    • SSDEEP

      6144:k2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:k2TFafJiHCWBWPMjVWrXK0

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks