Overview

overview

7

Static

static

3

2024-04-24...py.exe

windows7-x64

7

2024-04-24...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-24_55dbdbe03b9e295477f83e997c009ab9_mafia_nionspy

  • Size

    280KB

  • Sample

    240424-eafvaaee79

  • MD5

    55dbdbe03b9e295477f83e997c009ab9

  • SHA1

    2244e3115989e54a4d7734e4285711d53b023000

  • SHA256

    f016892c70bbce96064dd6fd3f6b869aa526a730c21e08799299a7dcd63c7adb

  • SHA512

    05e625c9ef6d699640ad232e5daaeb58bd52d06b69dfaef666f2acce32fb03a4329ee37a06085e2cb89d7d3a4d8c3cbb3c98d0d0a41474f1adc3a04f76205ba2

  • SSDEEP

    6144:+Tz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDK:+TBPFV0RyWl3h2E+7pl

Score
7/10

Malware Config

Targets

    • Target

      2024-04-24_55dbdbe03b9e295477f83e997c009ab9_mafia_nionspy

    • Size

      280KB

    • MD5

      55dbdbe03b9e295477f83e997c009ab9

    • SHA1

      2244e3115989e54a4d7734e4285711d53b023000

    • SHA256

      f016892c70bbce96064dd6fd3f6b869aa526a730c21e08799299a7dcd63c7adb

    • SHA512

      05e625c9ef6d699640ad232e5daaeb58bd52d06b69dfaef666f2acce32fb03a4329ee37a06085e2cb89d7d3a4d8c3cbb3c98d0d0a41474f1adc3a04f76205ba2

    • SSDEEP

      6144:+Tz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDK:+TBPFV0RyWl3h2E+7pl

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks