Overview

overview

7

Static

static

3

2024-03-29...py.exe

windows7-x64

7

2024-03-29...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-29_7d36f666bc755529f22cff114a949ddc_mafia_nionspy

  • Size

    348KB

  • Sample

    240329-szychscb34

  • MD5

    7d36f666bc755529f22cff114a949ddc

  • SHA1

    eb8ad4cd930d938d46258591d9119db88e16baa1

  • SHA256

    a5f2602c4ff6c335a9431540501287f897def7199f5df6698517c2bb7bd50ad2

  • SHA512

    a18e358835cca6e6afbcc7a3afeadb0ab44ceb6d355344b2656ed3d179c532de8b1487269e3884f66e5d3ddcec395fd049ecc372b8efa1447e98e40e63ac4c3e

  • SSDEEP

    6144:92+JS2sFZfI8U0obHCW/2a7XQcsPMjVWr289gkPzDhmv:92TFZfJiHCWBWPMjVWrHfmv

Score
7/10

Malware Config

Targets

    • Target

      2024-03-29_7d36f666bc755529f22cff114a949ddc_mafia_nionspy

    • Size

      348KB

    • MD5

      7d36f666bc755529f22cff114a949ddc

    • SHA1

      eb8ad4cd930d938d46258591d9119db88e16baa1

    • SHA256

      a5f2602c4ff6c335a9431540501287f897def7199f5df6698517c2bb7bd50ad2

    • SHA512

      a18e358835cca6e6afbcc7a3afeadb0ab44ceb6d355344b2656ed3d179c532de8b1487269e3884f66e5d3ddcec395fd049ecc372b8efa1447e98e40e63ac4c3e

    • SSDEEP

      6144:92+JS2sFZfI8U0obHCW/2a7XQcsPMjVWr289gkPzDhmv:92TFZfJiHCWBWPMjVWrHfmv

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks