Overview

overview

7

Static

static

3

2024-07-23...py.exe

windows7-x64

7

2024-07-23...py.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-07-23_49be7126983a5ecd0c6c296e7d113099_mafia_nionspy

  • Size

    280KB

  • Sample

    240723-p78xfatfma

  • MD5

    49be7126983a5ecd0c6c296e7d113099

  • SHA1

    8dbe2189b5db3aabdca339c816b7c5c36f435536

  • SHA256

    767c4f8490cf7eff6d4065e6131520239150238d3edca81f34564b4fa96c5620

  • SHA512

    2ccc2c02d3e2f8ce4e28f9ff918757610e597d9f389b4f93e3cf037aabf73131b63ed066bd8b6a5909be3114e8072e5aae1ab835d4c94ec97f2448ea96fe1166

  • SSDEEP

    6144:RQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:RQMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-07-23_49be7126983a5ecd0c6c296e7d113099_mafia_nionspy

    • Size

      280KB

    • MD5

      49be7126983a5ecd0c6c296e7d113099

    • SHA1

      8dbe2189b5db3aabdca339c816b7c5c36f435536

    • SHA256

      767c4f8490cf7eff6d4065e6131520239150238d3edca81f34564b4fa96c5620

    • SHA512

      2ccc2c02d3e2f8ce4e28f9ff918757610e597d9f389b4f93e3cf037aabf73131b63ed066bd8b6a5909be3114e8072e5aae1ab835d4c94ec97f2448ea96fe1166

    • SSDEEP

      6144:RQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:RQMyfmNFHfnWfhLZVHmOog

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks