Overview

overview

7

Static

static

3

2024-04-11...py.exe

windows7-x64

7

2024-04-11...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-11_3960a3c9b9afe1e849bb6b50347e7d79_mafia_nionspy

  • Size

    348KB

  • Sample

    240411-eb317see7z

  • MD5

    3960a3c9b9afe1e849bb6b50347e7d79

  • SHA1

    f6e780cf1b1fcf57c44cb86d006b65e2675b1131

  • SHA256

    d2141e8831f999eb7c8108da1ab6d7b984bbd280ff04013bf9306a320e7d451b

  • SHA512

    05b4e71287ae546b8b737e0a0a2803290ad76b8976ffb9d2ffcdae8236abcd8d0bc7a452e2e3ff4ed3fea2137f563c5091016791f33041fd614c46b7e5ab3588

  • SSDEEP

    6144:62+JS2sFZfI8U0obHCW/2a7XQcsPMjVWr289gkPzDhmv:62TFZfJiHCWBWPMjVWrHfmv

Score
7/10

Malware Config

Targets

    • Target

      2024-04-11_3960a3c9b9afe1e849bb6b50347e7d79_mafia_nionspy

    • Size

      348KB

    • MD5

      3960a3c9b9afe1e849bb6b50347e7d79

    • SHA1

      f6e780cf1b1fcf57c44cb86d006b65e2675b1131

    • SHA256

      d2141e8831f999eb7c8108da1ab6d7b984bbd280ff04013bf9306a320e7d451b

    • SHA512

      05b4e71287ae546b8b737e0a0a2803290ad76b8976ffb9d2ffcdae8236abcd8d0bc7a452e2e3ff4ed3fea2137f563c5091016791f33041fd614c46b7e5ab3588

    • SSDEEP

      6144:62+JS2sFZfI8U0obHCW/2a7XQcsPMjVWr289gkPzDhmv:62TFZfJiHCWBWPMjVWrHfmv

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks