Overview

overview

7

Static

static

3

2024-05-03...py.exe

windows7-x64

3

2024-05-03...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-03_c98ddbd1f2c5c70eb0b8f45261415b2e_mafia_nionspy

  • Size

    328KB

  • Sample

    240503-wrw19scf3z

  • MD5

    c98ddbd1f2c5c70eb0b8f45261415b2e

  • SHA1

    16e5e5013443c8a25ea34d1738cb8b8deb38a79e

  • SHA256

    58b70a7af1bbbebefba97d5ffaf4e9397a48c7ebb2985ff449752cf00905cb3a

  • SHA512

    55118034da38830b7442fdef1dc665616ec9d6f8f1bf2269f95e53969394230509f407fafed332f1c39f974b6a98c0e57404f51d45583ddc943041418e641a99

  • SSDEEP

    6144:i2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG89gkPzDh1v:i2TFafJiHCWBWPMjVWrXf1v

Score
7/10

Malware Config

Targets

    • Target

      2024-05-03_c98ddbd1f2c5c70eb0b8f45261415b2e_mafia_nionspy

    • Size

      328KB

    • MD5

      c98ddbd1f2c5c70eb0b8f45261415b2e

    • SHA1

      16e5e5013443c8a25ea34d1738cb8b8deb38a79e

    • SHA256

      58b70a7af1bbbebefba97d5ffaf4e9397a48c7ebb2985ff449752cf00905cb3a

    • SHA512

      55118034da38830b7442fdef1dc665616ec9d6f8f1bf2269f95e53969394230509f407fafed332f1c39f974b6a98c0e57404f51d45583ddc943041418e641a99

    • SSDEEP

      6144:i2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG89gkPzDh1v:i2TFafJiHCWBWPMjVWrXf1v

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks