Overview

overview

7

Static

static

3

2024-05-02...py.exe

windows7-x64

7

2024-05-02...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-02_eb79c1deeaff603f1720c2c07fd5a242_mafia_nionspy

  • Size

    288KB

  • Sample

    240502-j8zr9sfb93

  • MD5

    eb79c1deeaff603f1720c2c07fd5a242

  • SHA1

    3147e1fef4e332a166924e6ff008a559058be677

  • SHA256

    6d186beb32058c4f609c77556174cae4efb0a11483205c7f12da1e41baf3603a

  • SHA512

    46f2226badd4a99d308c1c7babb7686e66f5fd756f0cdda0a0e8eb1e14529c04ec7be764f6475797f2865617ab0287c68d5a0f5e7ceeea6682715dab894ea53d

  • SSDEEP

    6144:jQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:jQMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-05-02_eb79c1deeaff603f1720c2c07fd5a242_mafia_nionspy

    • Size

      288KB

    • MD5

      eb79c1deeaff603f1720c2c07fd5a242

    • SHA1

      3147e1fef4e332a166924e6ff008a559058be677

    • SHA256

      6d186beb32058c4f609c77556174cae4efb0a11483205c7f12da1e41baf3603a

    • SHA512

      46f2226badd4a99d308c1c7babb7686e66f5fd756f0cdda0a0e8eb1e14529c04ec7be764f6475797f2865617ab0287c68d5a0f5e7ceeea6682715dab894ea53d

    • SSDEEP

      6144:jQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:jQMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks