Overview

overview

7

Static

static

3

2024-04-17...py.exe

windows7-x64

7

2024-04-17...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-17_0d7658db4b0a50da84fbb27a219da59d_mafia_nionspy

  • Size

    280KB

  • Sample

    240417-d9fg5acg45

  • MD5

    0d7658db4b0a50da84fbb27a219da59d

  • SHA1

    ac3814114fa296299cba45880484de5c8865a196

  • SHA256

    0cbf77532f92433b8cb26b025ab0b8956e101b1b58bbca565681213426e70bfc

  • SHA512

    3828f133ee7798084a712314d70183aed356de05d73bad28d1d23ed52138e8b9b7c5758e93767bb00bfcd061a6ed06ad5771d475b37d68ef0b9690e7293326d9

  • SSDEEP

    6144:JQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:JQMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-04-17_0d7658db4b0a50da84fbb27a219da59d_mafia_nionspy

    • Size

      280KB

    • MD5

      0d7658db4b0a50da84fbb27a219da59d

    • SHA1

      ac3814114fa296299cba45880484de5c8865a196

    • SHA256

      0cbf77532f92433b8cb26b025ab0b8956e101b1b58bbca565681213426e70bfc

    • SHA512

      3828f133ee7798084a712314d70183aed356de05d73bad28d1d23ed52138e8b9b7c5758e93767bb00bfcd061a6ed06ad5771d475b37d68ef0b9690e7293326d9

    • SSDEEP

      6144:JQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:JQMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks