Overview

overview

7

Static

static

3

2024-05-20...py.exe

windows7-x64

7

2024-05-20...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-20_fa0d7f0d99f31a1417838b731b81b1ea_mafia_nionspy

  • Size

    280KB

  • Sample

    240520-dat68sgh3v

  • MD5

    fa0d7f0d99f31a1417838b731b81b1ea

  • SHA1

    16fca0345aef612102821f9e7ca2ac1e2db0c580

  • SHA256

    dd33f3a10c9b1aeb1018c07c4b2e8612e5b1c95e9c3aa5a1945d1778e931a67b

  • SHA512

    0e0d63ad4668cf743d6b33eab4be8a04d6d733b19156cd86ea275c6c63095ef0dc1ccf22cfcc1a3d09b700e87b5c1a9006cd86b4883b9e2d3e9646c95818e229

  • SSDEEP

    6144:aTz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDK:aTBPFV0RyWl3h2E+7pl

Score
7/10

Malware Config

Targets

    • Target

      2024-05-20_fa0d7f0d99f31a1417838b731b81b1ea_mafia_nionspy

    • Size

      280KB

    • MD5

      fa0d7f0d99f31a1417838b731b81b1ea

    • SHA1

      16fca0345aef612102821f9e7ca2ac1e2db0c580

    • SHA256

      dd33f3a10c9b1aeb1018c07c4b2e8612e5b1c95e9c3aa5a1945d1778e931a67b

    • SHA512

      0e0d63ad4668cf743d6b33eab4be8a04d6d733b19156cd86ea275c6c63095ef0dc1ccf22cfcc1a3d09b700e87b5c1a9006cd86b4883b9e2d3e9646c95818e229

    • SSDEEP

      6144:aTz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDK:aTBPFV0RyWl3h2E+7pl

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks