Overview

overview

7

Static

static

3

2024-03-13...py.exe

windows7-x64

7

2024-03-13...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-13_029dcc96f7850331f5f08f520fd3147f_mafia_nionspy

  • Size

    280KB

  • Sample

    240313-2mmvpabc2v

  • MD5

    029dcc96f7850331f5f08f520fd3147f

  • SHA1

    fdc602b2913455ad3a1d027d28b48a85b8181bf4

  • SHA256

    de2ab457ff367ecb37f8c1d9e99cbb0c9150dbc77d715d4891db8b3b490e1752

  • SHA512

    a1971b91ee31c7513b2308cfa8c4d46216f71de414c1f9cd12edc0e6912dd2ef3ae1bcbfedbdf2624de4384f03e9480c3db20f976d8d1618e71c893392511db1

  • SSDEEP

    6144:3Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:3QMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-03-13_029dcc96f7850331f5f08f520fd3147f_mafia_nionspy

    • Size

      280KB

    • MD5

      029dcc96f7850331f5f08f520fd3147f

    • SHA1

      fdc602b2913455ad3a1d027d28b48a85b8181bf4

    • SHA256

      de2ab457ff367ecb37f8c1d9e99cbb0c9150dbc77d715d4891db8b3b490e1752

    • SHA512

      a1971b91ee31c7513b2308cfa8c4d46216f71de414c1f9cd12edc0e6912dd2ef3ae1bcbfedbdf2624de4384f03e9480c3db20f976d8d1618e71c893392511db1

    • SSDEEP

      6144:3Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:3QMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks