Overview

overview

7

Static

static

3

2024-04-28...py.exe

windows7-x64

7

2024-04-28...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-28_e2d4b277aea11080e8a64d86a4a31735_mafia_nionspy

  • Size

    280KB

  • Sample

    240428-xptzkaeh4y

  • MD5

    e2d4b277aea11080e8a64d86a4a31735

  • SHA1

    6ccc03f5830b473bd2422fd2b80dfac409c6e6a5

  • SHA256

    2519f17e39dbd112d1d6906c54ce29d38620f9e5862db7586d6c0bd8e5edb1d8

  • SHA512

    cffd0adcc7dd07e69e1437dc59a654e12879e96c0f068c43bb771e00ff99388f4724e1590e515f24ede062a55b7ebbcd165049d7a30b93fdae62501f474423da

  • SSDEEP

    6144:4Tz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDK:4TBPFV0RyWl3h2E+7pl

Score
7/10

Malware Config

Targets

    • Target

      2024-04-28_e2d4b277aea11080e8a64d86a4a31735_mafia_nionspy

    • Size

      280KB

    • MD5

      e2d4b277aea11080e8a64d86a4a31735

    • SHA1

      6ccc03f5830b473bd2422fd2b80dfac409c6e6a5

    • SHA256

      2519f17e39dbd112d1d6906c54ce29d38620f9e5862db7586d6c0bd8e5edb1d8

    • SHA512

      cffd0adcc7dd07e69e1437dc59a654e12879e96c0f068c43bb771e00ff99388f4724e1590e515f24ede062a55b7ebbcd165049d7a30b93fdae62501f474423da

    • SSDEEP

      6144:4Tz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDK:4TBPFV0RyWl3h2E+7pl

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks