Overview

overview

7

Static

static

3

2024-03-08...py.exe

windows7-x64

7

2024-03-08...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-08_d76037ab2c639f3483b86060d01ada4f_mafia_nionspy

  • Size

    280KB

  • Sample

    240308-npq38sdh97

  • MD5

    d76037ab2c639f3483b86060d01ada4f

  • SHA1

    3f60d457f99a5dbce14329cbe8e104e665e903fa

  • SHA256

    63154a6224c661c7401b84dccae35b1d3204a5bbdf489aeece2ca85e5724adf2

  • SHA512

    235f38e11c93f7d555c67e2c1e434f226f09adae9594d17934c3c828ecbaf6dbb2402f5ba5695d64d9956b22d4a35a6933477fc71d1ffef1c38cfebf07332603

  • SSDEEP

    6144:9Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:9QMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-03-08_d76037ab2c639f3483b86060d01ada4f_mafia_nionspy

    • Size

      280KB

    • MD5

      d76037ab2c639f3483b86060d01ada4f

    • SHA1

      3f60d457f99a5dbce14329cbe8e104e665e903fa

    • SHA256

      63154a6224c661c7401b84dccae35b1d3204a5bbdf489aeece2ca85e5724adf2

    • SHA512

      235f38e11c93f7d555c67e2c1e434f226f09adae9594d17934c3c828ecbaf6dbb2402f5ba5695d64d9956b22d4a35a6933477fc71d1ffef1c38cfebf07332603

    • SSDEEP

      6144:9Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:9QMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks