Overview

overview

7

Static

static

3

2024-05-09...py.exe

windows7-x64

7

2024-05-09...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-09_398d9246662762328e07477fd491ff83_mafia_nionspy

  • Size

    279KB

  • Sample

    240509-a7bjlsha9s

  • MD5

    398d9246662762328e07477fd491ff83

  • SHA1

    51ce0e1ef62dbb5629fe161f3eec433e3e6bcb18

  • SHA256

    3c87f516ddd58209e2f5c245f7a3ec7fba0c6a60515ecdf4b6017af4efe6b26d

  • SHA512

    3574d806ab1b2cee1a1d7cb437b6662a9e2ff40bebcf6bb35bb08a61118dd0adab64076d8a80d42ad71433643bb7a4637d11be015804bd519ef25480ab9526ae

  • SSDEEP

    6144:rTz+WrPFZvTXb4RyW42vFlOloh2E+7phg7ozD:rTBPFV0RyWl3h2E+7ph

Score
7/10

Malware Config

Targets

    • Target

      2024-05-09_398d9246662762328e07477fd491ff83_mafia_nionspy

    • Size

      279KB

    • MD5

      398d9246662762328e07477fd491ff83

    • SHA1

      51ce0e1ef62dbb5629fe161f3eec433e3e6bcb18

    • SHA256

      3c87f516ddd58209e2f5c245f7a3ec7fba0c6a60515ecdf4b6017af4efe6b26d

    • SHA512

      3574d806ab1b2cee1a1d7cb437b6662a9e2ff40bebcf6bb35bb08a61118dd0adab64076d8a80d42ad71433643bb7a4637d11be015804bd519ef25480ab9526ae

    • SSDEEP

      6144:rTz+WrPFZvTXb4RyW42vFlOloh2E+7phg7ozD:rTBPFV0RyWl3h2E+7ph

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks