Overview

overview

7

Static

static

3

2024-04-25...py.exe

windows7-x64

7

2024-04-25...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-25_e02dd923dd96a964711fc2068ae85e3a_mafia_nionspy

  • Size

    348KB

  • Sample

    240425-qt62csbb71

  • MD5

    e02dd923dd96a964711fc2068ae85e3a

  • SHA1

    832d38b68b07f7c8e36e25933652f120e2bc2f0d

  • SHA256

    4c5205a1b517dba0f1e7856c42eeda1fc98dde387ca8e064f1d5dc36071c9be4

  • SHA512

    bad36d09cb340a9e0b2b213ef869a999b015f028f28d79151e6f3db1a27c86ba41d16fdc01dd96745258ba1e0193c178bf40d6b80178ce45305c1220b78405c2

  • SSDEEP

    6144:Q2+JS2sFZfI8U0obHCW/2a7XQcsPMjVWr289gkPzDhmv:Q2TFZfJiHCWBWPMjVWrHfmv

Score
7/10

Malware Config

Targets

    • Target

      2024-04-25_e02dd923dd96a964711fc2068ae85e3a_mafia_nionspy

    • Size

      348KB

    • MD5

      e02dd923dd96a964711fc2068ae85e3a

    • SHA1

      832d38b68b07f7c8e36e25933652f120e2bc2f0d

    • SHA256

      4c5205a1b517dba0f1e7856c42eeda1fc98dde387ca8e064f1d5dc36071c9be4

    • SHA512

      bad36d09cb340a9e0b2b213ef869a999b015f028f28d79151e6f3db1a27c86ba41d16fdc01dd96745258ba1e0193c178bf40d6b80178ce45305c1220b78405c2

    • SSDEEP

      6144:Q2+JS2sFZfI8U0obHCW/2a7XQcsPMjVWr289gkPzDhmv:Q2TFZfJiHCWBWPMjVWrHfmv

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks