Overview

overview

7

Static

static

3

2024-03-07...py.exe

windows7-x64

7

2024-03-07...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-07_980385ee528eebd61793de6d494e1764_mafia_nionspy

  • Size

    327KB

  • Sample

    240307-lw4a2ahf6y

  • MD5

    980385ee528eebd61793de6d494e1764

  • SHA1

    47aee091743777a3cb14491a600dcfc7edd0608d

  • SHA256

    0c8e142a5867c9e82db61661f3825eea1c188d8ec9b3617f3fab2cf037314bdb

  • SHA512

    1f8caae61d79a3b94d473bee583ebba7b638f953358b16d5ecd2292f0dbfed20cff0fd71004e193558addd7ef364df8f9943d4f44958958230134dd63cd56751

  • SSDEEP

    6144:i2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:i2TFafJiHCWBWPMjVWrXK0

Score
7/10

Malware Config

Targets

    • Target

      2024-03-07_980385ee528eebd61793de6d494e1764_mafia_nionspy

    • Size

      327KB

    • MD5

      980385ee528eebd61793de6d494e1764

    • SHA1

      47aee091743777a3cb14491a600dcfc7edd0608d

    • SHA256

      0c8e142a5867c9e82db61661f3825eea1c188d8ec9b3617f3fab2cf037314bdb

    • SHA512

      1f8caae61d79a3b94d473bee583ebba7b638f953358b16d5ecd2292f0dbfed20cff0fd71004e193558addd7ef364df8f9943d4f44958958230134dd63cd56751

    • SSDEEP

      6144:i2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:i2TFafJiHCWBWPMjVWrXK0

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks