Overview

overview

7

Static

static

3

2024-05-27...py.exe

windows7-x64

7

2024-05-27...py.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-27_6911781b4fac5ecc09047f3b25f30976_mafia_nionspy

  • Size

    280KB

  • Sample

    240527-avnneaaf85

  • MD5

    6911781b4fac5ecc09047f3b25f30976

  • SHA1

    935a3d0755f3a0822ebf7b9dd9cf1b099ce288d5

  • SHA256

    48c6a91669365a9edd96a535004ca1baa6dd15999d6aeffcc781fbcb67f81705

  • SHA512

    918f12d85743478b3485defc50e9baa19cd54142123a11cc64dc56520748e7897a0626d9561f31032162ff9c5ed01688879f8aa089bba6eade4d7503c7ea5aad

  • SSDEEP

    6144:tQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:tQMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-05-27_6911781b4fac5ecc09047f3b25f30976_mafia_nionspy

    • Size

      280KB

    • MD5

      6911781b4fac5ecc09047f3b25f30976

    • SHA1

      935a3d0755f3a0822ebf7b9dd9cf1b099ce288d5

    • SHA256

      48c6a91669365a9edd96a535004ca1baa6dd15999d6aeffcc781fbcb67f81705

    • SHA512

      918f12d85743478b3485defc50e9baa19cd54142123a11cc64dc56520748e7897a0626d9561f31032162ff9c5ed01688879f8aa089bba6eade4d7503c7ea5aad

    • SSDEEP

      6144:tQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:tQMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks