Overview

overview

7

Static

static

3

2024-07-22...py.exe

windows7-x64

7

2024-07-22...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-07-22_fee15c8df2f4e2e21308830600808156_mafia_nionspy

  • Size

    274KB

  • Sample

    240722-xnajjashnl

  • MD5

    fee15c8df2f4e2e21308830600808156

  • SHA1

    3b0815b26cbc46863a99790cdf54d58655261bf1

  • SHA256

    9e78f8a9aca04f3b5e905f2b88c756e3a468293b8ded688918535045ee68860c

  • SHA512

    23719b2310b8ee4f6edf82c581fb49f1ce25f8d6e77928533a885489079ac2421b72201cbe8de9497f8d66bff20523ac1cb650086f0becd3d9530759bc9abdbb

  • SSDEEP

    6144:uYvZ6brUj+bvqHXSpWr2Kqz83Oad3Jg4PlPDIQ+KLzDDg:uYvEbrUjp3SpWggd3JBPlPDIQ3g

Score
7/10

Malware Config

Targets

    • Target

      2024-07-22_fee15c8df2f4e2e21308830600808156_mafia_nionspy

    • Size

      274KB

    • MD5

      fee15c8df2f4e2e21308830600808156

    • SHA1

      3b0815b26cbc46863a99790cdf54d58655261bf1

    • SHA256

      9e78f8a9aca04f3b5e905f2b88c756e3a468293b8ded688918535045ee68860c

    • SHA512

      23719b2310b8ee4f6edf82c581fb49f1ce25f8d6e77928533a885489079ac2421b72201cbe8de9497f8d66bff20523ac1cb650086f0becd3d9530759bc9abdbb

    • SSDEEP

      6144:uYvZ6brUj+bvqHXSpWr2Kqz83Oad3Jg4PlPDIQ+KLzDDg:uYvEbrUjp3SpWggd3JBPlPDIQ3g

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks