Overview

overview

7

Static

static

3

2024-03-15...py.exe

windows7-x64

7

2024-03-15...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-15_cf6ba45ed9ec181de54a11395457ddab_mafia_nionspy

  • Size

    280KB

  • Sample

    240315-jm6npadc97

  • MD5

    cf6ba45ed9ec181de54a11395457ddab

  • SHA1

    82eb93a4e9f76bb4606cb78833a335363c4c6207

  • SHA256

    ce262256c6025cb814be9250fb0eb95a6863a4320689e96230beb2451c2a63a3

  • SHA512

    c74e5fa11a2869f2357f0137c803c587978a02cc7fa82cd4e5b30c6ad1be2ccbb9ab569a2481b8512505f82791bb1c889e0f7b39ceb1a7fea5b0375a6d3ea8a2

  • SSDEEP

    6144:rQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:rQMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-03-15_cf6ba45ed9ec181de54a11395457ddab_mafia_nionspy

    • Size

      280KB

    • MD5

      cf6ba45ed9ec181de54a11395457ddab

    • SHA1

      82eb93a4e9f76bb4606cb78833a335363c4c6207

    • SHA256

      ce262256c6025cb814be9250fb0eb95a6863a4320689e96230beb2451c2a63a3

    • SHA512

      c74e5fa11a2869f2357f0137c803c587978a02cc7fa82cd4e5b30c6ad1be2ccbb9ab569a2481b8512505f82791bb1c889e0f7b39ceb1a7fea5b0375a6d3ea8a2

    • SSDEEP

      6144:rQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:rQMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks