Overview

overview

7

Static

static

3

2024-06-08...py.exe

windows7-x64

7

2024-06-08...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-06-08_2375dbbc9973e7df9c7d2fee077d58fb_mafia_nionspy

  • Size

    280KB

  • Sample

    240608-d1qazagc91

  • MD5

    2375dbbc9973e7df9c7d2fee077d58fb

  • SHA1

    94a117578d1af8031e5dcb4894326ce6fb35300b

  • SHA256

    ae344d8525f5b3f6623979fc6be783623dde9668dac2a6895ba81f08c9b123fb

  • SHA512

    fdc07bb977871295065d4e26e76d82c65119f21335882466b6988ecaedefe2c74555121f4e234815d35cd75aa6af20c226c4b49877586c0c54c3a17c99a6f780

  • SSDEEP

    6144:3Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:3QMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-06-08_2375dbbc9973e7df9c7d2fee077d58fb_mafia_nionspy

    • Size

      280KB

    • MD5

      2375dbbc9973e7df9c7d2fee077d58fb

    • SHA1

      94a117578d1af8031e5dcb4894326ce6fb35300b

    • SHA256

      ae344d8525f5b3f6623979fc6be783623dde9668dac2a6895ba81f08c9b123fb

    • SHA512

      fdc07bb977871295065d4e26e76d82c65119f21335882466b6988ecaedefe2c74555121f4e234815d35cd75aa6af20c226c4b49877586c0c54c3a17c99a6f780

    • SSDEEP

      6144:3Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:3QMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks