Overview

overview

7

Static

static

3

2024-03-11...py.exe

windows7-x64

7

2024-03-11...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-11_decd00defd7750461472b3bd19651b7b_mafia_nionspy

  • Size

    274KB

  • Sample

    240311-3prgbshg5z

  • MD5

    decd00defd7750461472b3bd19651b7b

  • SHA1

    3d24c653e76d00aefd95f553bcceb3820ccb23fc

  • SHA256

    98f50f6e0ef0a766a27f06c9bbd8df049e07ed360347a440bf48b755a50bd6f4

  • SHA512

    147d8e2bdec4f066a8e0483ea18cea6b47d6d80422334b5e7f6fbf610dae43b41bf311e5958ec47367894b83a49419d85500e53f90f8577ec312a67516aa90d4

  • SSDEEP

    6144:EYvZ6brUj+bvqHXSpWr2Kqz83Oad3Jg4PlPDIQ+KLzDDg:EYvEbrUjp3SpWggd3JBPlPDIQ3g

Score
7/10

Malware Config

Targets

    • Target

      2024-03-11_decd00defd7750461472b3bd19651b7b_mafia_nionspy

    • Size

      274KB

    • MD5

      decd00defd7750461472b3bd19651b7b

    • SHA1

      3d24c653e76d00aefd95f553bcceb3820ccb23fc

    • SHA256

      98f50f6e0ef0a766a27f06c9bbd8df049e07ed360347a440bf48b755a50bd6f4

    • SHA512

      147d8e2bdec4f066a8e0483ea18cea6b47d6d80422334b5e7f6fbf610dae43b41bf311e5958ec47367894b83a49419d85500e53f90f8577ec312a67516aa90d4

    • SSDEEP

      6144:EYvZ6brUj+bvqHXSpWr2Kqz83Oad3Jg4PlPDIQ+KLzDDg:EYvEbrUjp3SpWggd3JBPlPDIQ3g

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks