Overview

overview

7

Static

static

3

2024-03-14...py.exe

windows7-x64

7

2024-03-14...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-14_d3f8a913e998211c5c5b8f7b2a5ca50b_mafia_nionspy

  • Size

    327KB

  • Sample

    240314-c6qcgsba27

  • MD5

    d3f8a913e998211c5c5b8f7b2a5ca50b

  • SHA1

    32b01742765fc12301586209f7026e06001e9249

  • SHA256

    f0f03a24c16809237a133f4c684cc7563542375454f1518ce1815c6a6bd98222

  • SHA512

    7d4fd34d0792f61ebd178458faee309dc84896f12d5ae804b661811b1a0380e3e6dcfb453179f95b5fde06962231f43bad883e0a0bac4915c05997d9cb8296ea

  • SSDEEP

    6144:42+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:42TFafJiHCWBWPMjVWrXK0

Score
7/10

Malware Config

Targets

    • Target

      2024-03-14_d3f8a913e998211c5c5b8f7b2a5ca50b_mafia_nionspy

    • Size

      327KB

    • MD5

      d3f8a913e998211c5c5b8f7b2a5ca50b

    • SHA1

      32b01742765fc12301586209f7026e06001e9249

    • SHA256

      f0f03a24c16809237a133f4c684cc7563542375454f1518ce1815c6a6bd98222

    • SHA512

      7d4fd34d0792f61ebd178458faee309dc84896f12d5ae804b661811b1a0380e3e6dcfb453179f95b5fde06962231f43bad883e0a0bac4915c05997d9cb8296ea

    • SSDEEP

      6144:42+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:42TFafJiHCWBWPMjVWrXK0

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks