Overview

overview

7

Static

static

3

2024-04-19...py.exe

windows7-x64

7

2024-04-19...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-19_f9546236d4ff46ea746001dd535f7250_mafia_nionspy

  • Size

    348KB

  • Sample

    240419-jmy9lscc43

  • MD5

    f9546236d4ff46ea746001dd535f7250

  • SHA1

    ffd824c685ea5120739afe28a78345f75e6967ba

  • SHA256

    fa0bc9475cd9c7fe01ae29d5006b598334806558c8b3182e1245f569eccdc02f

  • SHA512

    54b7a0a69c30a95669e83d38f99183f96ede2ce800bbc14c38d2105addfd5f290e9bb2c65bba741f2ca22d76d3f64b1a0f4b04527fa56f8c2d885320c6271d52

  • SSDEEP

    6144:M2+JS2sFZfI8U0obHCW/2a7XQcsPMjVWr289gkPzDhmv:M2TFZfJiHCWBWPMjVWrHfmv

Score
7/10

Malware Config

Targets

    • Target

      2024-04-19_f9546236d4ff46ea746001dd535f7250_mafia_nionspy

    • Size

      348KB

    • MD5

      f9546236d4ff46ea746001dd535f7250

    • SHA1

      ffd824c685ea5120739afe28a78345f75e6967ba

    • SHA256

      fa0bc9475cd9c7fe01ae29d5006b598334806558c8b3182e1245f569eccdc02f

    • SHA512

      54b7a0a69c30a95669e83d38f99183f96ede2ce800bbc14c38d2105addfd5f290e9bb2c65bba741f2ca22d76d3f64b1a0f4b04527fa56f8c2d885320c6271d52

    • SSDEEP

      6144:M2+JS2sFZfI8U0obHCW/2a7XQcsPMjVWr289gkPzDhmv:M2TFZfJiHCWBWPMjVWrHfmv

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks