Overview

overview

7

Static

static

3

2024-03-18...py.exe

windows7-x64

7

2024-03-18...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-18_5820414a4dd41e2e80114cb2c02591fa_mafia_nionspy

  • Size

    274KB

  • Sample

    240318-x3qt3agc67

  • MD5

    5820414a4dd41e2e80114cb2c02591fa

  • SHA1

    a45586e285f0d5e7043cae76fffa31796c37dfbd

  • SHA256

    c39c33bbe7d0e8deb68e61c7fb753416aa7e0954b34488ed8fcda30031088748

  • SHA512

    7fc0c9429ed6c11666c8e06f0c97f2e22def6ff86d3c420c00fafa501627491b95a888f3384ac15032b44512e580a0023ba932f85dbd25e74ff83111e963da07

  • SSDEEP

    6144:xYvZ6brUj+bvqHXSpWr2Kqz83Oad3Jg4PlPDIQ+KLzDDg:xYvEbrUjp3SpWggd3JBPlPDIQ3g

Score
7/10

Malware Config

Targets

    • Target

      2024-03-18_5820414a4dd41e2e80114cb2c02591fa_mafia_nionspy

    • Size

      274KB

    • MD5

      5820414a4dd41e2e80114cb2c02591fa

    • SHA1

      a45586e285f0d5e7043cae76fffa31796c37dfbd

    • SHA256

      c39c33bbe7d0e8deb68e61c7fb753416aa7e0954b34488ed8fcda30031088748

    • SHA512

      7fc0c9429ed6c11666c8e06f0c97f2e22def6ff86d3c420c00fafa501627491b95a888f3384ac15032b44512e580a0023ba932f85dbd25e74ff83111e963da07

    • SSDEEP

      6144:xYvZ6brUj+bvqHXSpWr2Kqz83Oad3Jg4PlPDIQ+KLzDDg:xYvEbrUjp3SpWggd3JBPlPDIQ3g

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks