Overview

overview

7

Static

static

3

2024-04-22...py.exe

windows7-x64

7

2024-04-22...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-22_b5f472bda7b1e0cd06d417356ad0dbfd_mafia_nionspy

  • Size

    344KB

  • Sample

    240422-jlvvsshb8x

  • MD5

    b5f472bda7b1e0cd06d417356ad0dbfd

  • SHA1

    0590163cba0d467accc4b216312f215adf836a0d

  • SHA256

    3c081e7b6b90d14751dba38351c4db24070e46000d88bab77b0a7806cf722d35

  • SHA512

    ad4e96fda177b69086e307a870545185247a6ca89dfa7c112c83b836ddd6e1e24d13bdad47a285d21bb5f414e466c40f7891de2e26507e48745e988f4cb59852

  • SSDEEP

    6144:STz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:STBPFV0RyWl3h2E+7pYm0

Score
7/10

Malware Config

Targets

    • Target

      2024-04-22_b5f472bda7b1e0cd06d417356ad0dbfd_mafia_nionspy

    • Size

      344KB

    • MD5

      b5f472bda7b1e0cd06d417356ad0dbfd

    • SHA1

      0590163cba0d467accc4b216312f215adf836a0d

    • SHA256

      3c081e7b6b90d14751dba38351c4db24070e46000d88bab77b0a7806cf722d35

    • SHA512

      ad4e96fda177b69086e307a870545185247a6ca89dfa7c112c83b836ddd6e1e24d13bdad47a285d21bb5f414e466c40f7891de2e26507e48745e988f4cb59852

    • SSDEEP

      6144:STz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:STBPFV0RyWl3h2E+7pYm0

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks