Overview

overview

7

Static

static

3

2024-03-06...py.exe

windows7-x64

7

2024-03-06...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-06_8784a4ae736d0b0c76af52ba09addaa3_mafia_nionspy

  • Size

    328KB

  • Sample

    240306-lggtgsfh6v

  • MD5

    8784a4ae736d0b0c76af52ba09addaa3

  • SHA1

    d1a6d3e553ada91302d86027f736dca4c43dd132

  • SHA256

    049177f10be447125bfc1960c952826b46b9097b9c0dc93499902e65f20f4d54

  • SHA512

    5610780bd96e15fd04dddcb0be33aa4deb803bac3ef11c176556002dbed51057719eda9bb0e92c1e113a3cd071ef53803aa22ff228369b58cfc590dcde267aa2

  • SSDEEP

    6144:52+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG89gkPzDh1v:52TFafJiHCWBWPMjVWrXf1v

Score
7/10

Malware Config

Targets

    • Target

      2024-03-06_8784a4ae736d0b0c76af52ba09addaa3_mafia_nionspy

    • Size

      328KB

    • MD5

      8784a4ae736d0b0c76af52ba09addaa3

    • SHA1

      d1a6d3e553ada91302d86027f736dca4c43dd132

    • SHA256

      049177f10be447125bfc1960c952826b46b9097b9c0dc93499902e65f20f4d54

    • SHA512

      5610780bd96e15fd04dddcb0be33aa4deb803bac3ef11c176556002dbed51057719eda9bb0e92c1e113a3cd071ef53803aa22ff228369b58cfc590dcde267aa2

    • SSDEEP

      6144:52+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG89gkPzDh1v:52TFafJiHCWBWPMjVWrXf1v

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks