Overview

overview

7

Static

static

3

2024-03-14...py.exe

windows7-x64

7

2024-03-14...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-14_7a0c7e18d806e07fa5bc8478ac48048f_mafia_nionspy

  • Size

    327KB

  • Sample

    240314-3m9j5acf45

  • MD5

    7a0c7e18d806e07fa5bc8478ac48048f

  • SHA1

    ff0ffed347d3e283f6162f3bb84420981f3e51af

  • SHA256

    a3e32410a51953f0fda7b1150bd85845b108c64cdbe61d55da31274cb0154313

  • SHA512

    35dc2dad97eb90e2b6b3a56e3df29ba8297f56c7e032281541126be8a3b21e88d65a30aafe0904f73d55a8e743cc190985d94700d18f8d9399657a8de74de4a7

  • SSDEEP

    6144:R2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:R2TFafJiHCWBWPMjVWrXK0

Score
7/10

Malware Config

Targets

    • Target

      2024-03-14_7a0c7e18d806e07fa5bc8478ac48048f_mafia_nionspy

    • Size

      327KB

    • MD5

      7a0c7e18d806e07fa5bc8478ac48048f

    • SHA1

      ff0ffed347d3e283f6162f3bb84420981f3e51af

    • SHA256

      a3e32410a51953f0fda7b1150bd85845b108c64cdbe61d55da31274cb0154313

    • SHA512

      35dc2dad97eb90e2b6b3a56e3df29ba8297f56c7e032281541126be8a3b21e88d65a30aafe0904f73d55a8e743cc190985d94700d18f8d9399657a8de74de4a7

    • SSDEEP

      6144:R2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:R2TFafJiHCWBWPMjVWrXK0

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks