Overview

overview

7

Static

static

3

2024-04-15...py.exe

windows7-x64

7

2024-04-15...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-15_37a3d2bb5399944d8db19ebc8a198da9_mafia_nionspy

  • Size

    280KB

  • Sample

    240415-hj451sha29

  • MD5

    37a3d2bb5399944d8db19ebc8a198da9

  • SHA1

    93c338a3ff814804eed11090641319bec931d718

  • SHA256

    1383fd4cb6b1dd72637cfcb1bfaa0aae1e536405588c333b13f28e153d3870f8

  • SHA512

    4d7bc0e7a1bd73ed38138c6a4f7c654d5c4fb725196c8586c2775f5156d165cf8ddd2c4fc9c6bd28bc3bf386cf0a0bf5e52aa2e5c25c133a50d86fb00bbcdce4

  • SSDEEP

    6144:ZQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:ZQMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-04-15_37a3d2bb5399944d8db19ebc8a198da9_mafia_nionspy

    • Size

      280KB

    • MD5

      37a3d2bb5399944d8db19ebc8a198da9

    • SHA1

      93c338a3ff814804eed11090641319bec931d718

    • SHA256

      1383fd4cb6b1dd72637cfcb1bfaa0aae1e536405588c333b13f28e153d3870f8

    • SHA512

      4d7bc0e7a1bd73ed38138c6a4f7c654d5c4fb725196c8586c2775f5156d165cf8ddd2c4fc9c6bd28bc3bf386cf0a0bf5e52aa2e5c25c133a50d86fb00bbcdce4

    • SSDEEP

      6144:ZQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:ZQMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks