Overview

overview

7

Static

static

3

2024-03-15...py.exe

windows7-x64

7

2024-03-15...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-15_e1d06fe12e1948793e081ad358ab47e1_mafia_nionspy

  • Size

    280KB

  • Sample

    240315-yrspysbh56

  • MD5

    e1d06fe12e1948793e081ad358ab47e1

  • SHA1

    0c9c8be6eaf42efec342dc7b5ae4bc6a72167cec

  • SHA256

    bf04482734e5727ef13d6880aebfb4c5a3326fbe3a528285cfa764dcfa672813

  • SHA512

    d19470892e71f39bcc48df17e96caf978250f3a39057c610a0af0df6ae5fb60a1ccbad316a07eeb11ac9bdf91676f51aa3d2d3a7af93bf294334d55ef5d35817

  • SSDEEP

    6144:IQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:IQMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-03-15_e1d06fe12e1948793e081ad358ab47e1_mafia_nionspy

    • Size

      280KB

    • MD5

      e1d06fe12e1948793e081ad358ab47e1

    • SHA1

      0c9c8be6eaf42efec342dc7b5ae4bc6a72167cec

    • SHA256

      bf04482734e5727ef13d6880aebfb4c5a3326fbe3a528285cfa764dcfa672813

    • SHA512

      d19470892e71f39bcc48df17e96caf978250f3a39057c610a0af0df6ae5fb60a1ccbad316a07eeb11ac9bdf91676f51aa3d2d3a7af93bf294334d55ef5d35817

    • SSDEEP

      6144:IQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:IQMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks