Overview

overview

7

Static

static

3

2024-03-06...py.exe

windows7-x64

7

2024-03-06...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-06_fdfd768903321978f29d825cfc975553_mafia_nionspy

  • Size

    327KB

  • Sample

    240306-1yn2fsag49

  • MD5

    fdfd768903321978f29d825cfc975553

  • SHA1

    f9497a5153676dea17d848235c46c44d0f65e33f

  • SHA256

    13d0bc44c7209478d7ca44ef6613a924719c5acb90ac9e04768bbfc3f4ed3cb3

  • SHA512

    eb4cd02c1a49578065a50400497577a5278a77742878946eee886f74ee95bd86cb1220a775069e80292fe765998893772d503571a43cb144639fd910bdc76db9

  • SSDEEP

    6144:o2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:o2TFafJiHCWBWPMjVWrXK0

Score
7/10

Malware Config

Targets

    • Target

      2024-03-06_fdfd768903321978f29d825cfc975553_mafia_nionspy

    • Size

      327KB

    • MD5

      fdfd768903321978f29d825cfc975553

    • SHA1

      f9497a5153676dea17d848235c46c44d0f65e33f

    • SHA256

      13d0bc44c7209478d7ca44ef6613a924719c5acb90ac9e04768bbfc3f4ed3cb3

    • SHA512

      eb4cd02c1a49578065a50400497577a5278a77742878946eee886f74ee95bd86cb1220a775069e80292fe765998893772d503571a43cb144639fd910bdc76db9

    • SSDEEP

      6144:o2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:o2TFafJiHCWBWPMjVWrXK0

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks