Overview

overview

7

Static

static

3

2024-04-15...py.exe

windows7-x64

7

2024-04-15...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-15_01903af59bb2def6a406c2fba955ee01_mafia_nionspy

  • Size

    288KB

  • Sample

    240415-nhpltsfe2x

  • MD5

    01903af59bb2def6a406c2fba955ee01

  • SHA1

    31bca50f086754f400330095126532e8faeae31e

  • SHA256

    6f485de32f3640d1b726327fec88e631339085bddf9d3810d59461589ad35127

  • SHA512

    37b24f72590369b52f4a99765efb17320a4bac342cd3ffac49d878b72494edb436e689c8a2620ffd7cc55a21b66e975bc5a14e759c19f67dce7e281f0c52b7b1

  • SSDEEP

    6144:3Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:3QMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-04-15_01903af59bb2def6a406c2fba955ee01_mafia_nionspy

    • Size

      288KB

    • MD5

      01903af59bb2def6a406c2fba955ee01

    • SHA1

      31bca50f086754f400330095126532e8faeae31e

    • SHA256

      6f485de32f3640d1b726327fec88e631339085bddf9d3810d59461589ad35127

    • SHA512

      37b24f72590369b52f4a99765efb17320a4bac342cd3ffac49d878b72494edb436e689c8a2620ffd7cc55a21b66e975bc5a14e759c19f67dce7e281f0c52b7b1

    • SSDEEP

      6144:3Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:3QMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks