Overview

overview

7

Static

static

3

2024-06-08...py.exe

windows7-x64

7

2024-06-08...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-06-08_b565c80837365c308084f6a5668ce180_mafia_nionspy

  • Size

    344KB

  • Sample

    240608-z1yg8sgc81

  • MD5

    b565c80837365c308084f6a5668ce180

  • SHA1

    b072eb0729f55cec01e3c11ce86ec79211a3198c

  • SHA256

    eee5ad8c976658653240eb1d70b7ba6da6e9c986da231def4f60b7ac56733046

  • SHA512

    eae1bc0c1c5e2c701d57b16f9e86c858fcf38dd1106a69256884eb239e8cad09ef49445519d2f6b6de5f7414f64fea0d0c125dfb5a2b2c8a37338ea38a03dda4

  • SSDEEP

    6144:ITz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:ITBPFV0RyWl3h2E+7pYm0

Score
7/10

Malware Config

Targets

    • Target

      2024-06-08_b565c80837365c308084f6a5668ce180_mafia_nionspy

    • Size

      344KB

    • MD5

      b565c80837365c308084f6a5668ce180

    • SHA1

      b072eb0729f55cec01e3c11ce86ec79211a3198c

    • SHA256

      eee5ad8c976658653240eb1d70b7ba6da6e9c986da231def4f60b7ac56733046

    • SHA512

      eae1bc0c1c5e2c701d57b16f9e86c858fcf38dd1106a69256884eb239e8cad09ef49445519d2f6b6de5f7414f64fea0d0c125dfb5a2b2c8a37338ea38a03dda4

    • SSDEEP

      6144:ITz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:ITBPFV0RyWl3h2E+7pYm0

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks