Overview

overview

7

Static

static

3

2024-03-28...py.exe

windows7-x64

7

2024-03-28...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-03-28_c46bcae35642a65debe793a05927e789_mafia_nionspy

  • Size

    328KB

  • Sample

    240328-zpdcxsgc7v

  • MD5

    c46bcae35642a65debe793a05927e789

  • SHA1

    b4cc4132f5442fe9c336b9c817acb0da861c21e7

  • SHA256

    96978b59f26916c964e3fa4797a609e97b73c37b157b37504a2667ea52d21b38

  • SHA512

    294f6d2d611623dae9e48253a840bfcb67495cf7838491fc0ca060a3e6439bf63950cb1c8b61fc9c7980f5fb40f2ebe9c246bd4fbe240fc48858204c18372319

  • SSDEEP

    6144:82+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG89gkPzDh1v:82TFafJiHCWBWPMjVWrXf1v

Score
7/10

Malware Config

Targets

    • Target

      2024-03-28_c46bcae35642a65debe793a05927e789_mafia_nionspy

    • Size

      328KB

    • MD5

      c46bcae35642a65debe793a05927e789

    • SHA1

      b4cc4132f5442fe9c336b9c817acb0da861c21e7

    • SHA256

      96978b59f26916c964e3fa4797a609e97b73c37b157b37504a2667ea52d21b38

    • SHA512

      294f6d2d611623dae9e48253a840bfcb67495cf7838491fc0ca060a3e6439bf63950cb1c8b61fc9c7980f5fb40f2ebe9c246bd4fbe240fc48858204c18372319

    • SSDEEP

      6144:82+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG89gkPzDh1v:82TFafJiHCWBWPMjVWrXf1v

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks