Overview

overview

7

Static

static

3

2024-04-17...py.exe

windows7-x64

7

2024-04-17...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-17_cb1fd485a8f39c01a3d32f1f736d9f88_mafia_nionspy

  • Size

    348KB

  • Sample

    240417-c653yada91

  • MD5

    cb1fd485a8f39c01a3d32f1f736d9f88

  • SHA1

    c368cd52010d4a42a011986246f377e8bb40a417

  • SHA256

    6184945b0968ef84e0f364b4e43f9c2e60c458376da6f6b4534dc4eee249d801

  • SHA512

    bd85b1994d02423cbc7001e29247ea60fbc87d161e5fbcfe766a8d4b463b22be5626266b93ed3bc9b7eb7de20cb39e401cf50a4f49fd3203b67bbc28cf08e996

  • SSDEEP

    6144:h2+JS2sFZfI8U0obHCW/2a7XQcsPMjVWr289gkPzDhmv:h2TFZfJiHCWBWPMjVWrHfmv

Score
7/10

Malware Config

Targets

    • Target

      2024-04-17_cb1fd485a8f39c01a3d32f1f736d9f88_mafia_nionspy

    • Size

      348KB

    • MD5

      cb1fd485a8f39c01a3d32f1f736d9f88

    • SHA1

      c368cd52010d4a42a011986246f377e8bb40a417

    • SHA256

      6184945b0968ef84e0f364b4e43f9c2e60c458376da6f6b4534dc4eee249d801

    • SHA512

      bd85b1994d02423cbc7001e29247ea60fbc87d161e5fbcfe766a8d4b463b22be5626266b93ed3bc9b7eb7de20cb39e401cf50a4f49fd3203b67bbc28cf08e996

    • SSDEEP

      6144:h2+JS2sFZfI8U0obHCW/2a7XQcsPMjVWr289gkPzDhmv:h2TFZfJiHCWBWPMjVWrHfmv

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks