Overview

overview

7

Static

static

3

2024-02-28...py.exe

windows7-x64

7

2024-02-28...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-28_a887aee3df5645caccc77e45179311ec_mafia_nionspy

  • Size

    280KB

  • Sample

    240228-f1g1pscb72

  • MD5

    a887aee3df5645caccc77e45179311ec

  • SHA1

    8854d29c55362a7418844aa22801059a7c8d20a4

  • SHA256

    a4579cc6eed050706ecea8e6602707076901c786903737e9d0df63012fa54cfd

  • SHA512

    243f99bfd81df168b62245ee5c383338f28bb2b7900c06ccb2de1fdb00747ead0f6a428257fe76bd01fca9e126f3627c7002b34049434eb97b54c7bad09c25e3

  • SSDEEP

    6144:DQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:DQMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-02-28_a887aee3df5645caccc77e45179311ec_mafia_nionspy

    • Size

      280KB

    • MD5

      a887aee3df5645caccc77e45179311ec

    • SHA1

      8854d29c55362a7418844aa22801059a7c8d20a4

    • SHA256

      a4579cc6eed050706ecea8e6602707076901c786903737e9d0df63012fa54cfd

    • SHA512

      243f99bfd81df168b62245ee5c383338f28bb2b7900c06ccb2de1fdb00747ead0f6a428257fe76bd01fca9e126f3627c7002b34049434eb97b54c7bad09c25e3

    • SSDEEP

      6144:DQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:DQMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks