Overview

overview

7

Static

static

3

2024-04-30...py.exe

windows7-x64

7

2024-04-30...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-30_c9fb346b3f19156b182b4456946088a4_mafia_nionspy

  • Size

    344KB

  • Sample

    240430-flkhaach85

  • MD5

    c9fb346b3f19156b182b4456946088a4

  • SHA1

    08f177caf8b259298f4c44b1bbc387f815453ff0

  • SHA256

    4e7a4c94c4c6bb76518dcbaabe68ffb5a60dcb8d0029ad13da0d1be964fe55ad

  • SHA512

    9a6e9f640d1d1e5bf65d2574dd20815beb0ba6594d6bfbbb054c98b19fa2603f042926d8a5de6d394d615797b5c53be8801e747e72d72f9cd04fc43ccf0c0758

  • SSDEEP

    6144:3Tz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:3TBPFV0RyWl3h2E+7pYm0

Score
7/10

Malware Config

Targets

    • Target

      2024-04-30_c9fb346b3f19156b182b4456946088a4_mafia_nionspy

    • Size

      344KB

    • MD5

      c9fb346b3f19156b182b4456946088a4

    • SHA1

      08f177caf8b259298f4c44b1bbc387f815453ff0

    • SHA256

      4e7a4c94c4c6bb76518dcbaabe68ffb5a60dcb8d0029ad13da0d1be964fe55ad

    • SHA512

      9a6e9f640d1d1e5bf65d2574dd20815beb0ba6594d6bfbbb054c98b19fa2603f042926d8a5de6d394d615797b5c53be8801e747e72d72f9cd04fc43ccf0c0758

    • SSDEEP

      6144:3Tz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:3TBPFV0RyWl3h2E+7pYm0

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks