Overview

overview

7

Static

static

3

2024-03-14...py.exe

windows7-x64

7

2024-03-14...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-14_f201945616403a82bf1eecb20f765b6d_mafia_nionspy

  • Size

    327KB

  • Sample

    240314-bb81nseg2s

  • MD5

    f201945616403a82bf1eecb20f765b6d

  • SHA1

    d1bc272a85990480c2c9856c3c5b62ce8cd035e9

  • SHA256

    7ce86e07cbc9720ec1f5a4733099a700e0834db1be0c88bb4fb52627a308c91b

  • SHA512

    c3ea7d486e43cb83d2ba602fdbb27d83cddcf5bd50323eeed74b0011ba5fee2f1ef80c111813324a6c5c49b5e4220a876bd41f09b140b1adb19a2fbed623f3f3

  • SSDEEP

    6144:02+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:02TFafJiHCWBWPMjVWrXK0

Score
7/10

Malware Config

Targets

    • Target

      2024-03-14_f201945616403a82bf1eecb20f765b6d_mafia_nionspy

    • Size

      327KB

    • MD5

      f201945616403a82bf1eecb20f765b6d

    • SHA1

      d1bc272a85990480c2c9856c3c5b62ce8cd035e9

    • SHA256

      7ce86e07cbc9720ec1f5a4733099a700e0834db1be0c88bb4fb52627a308c91b

    • SHA512

      c3ea7d486e43cb83d2ba602fdbb27d83cddcf5bd50323eeed74b0011ba5fee2f1ef80c111813324a6c5c49b5e4220a876bd41f09b140b1adb19a2fbed623f3f3

    • SSDEEP

      6144:02+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:02TFafJiHCWBWPMjVWrXK0

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks