2907ab09d0e8e414e275fc03d5ce548d78405953d2a7cf73f93b7ae79a2f4459 | Triage

Sharing

General

Target

c6d242b3186782422d32e2f350b241b8_mafia_nionspy_JC.exe
Size

327KB
Sample

230828-xbb7lahf2z
MD5

c6d242b3186782422d32e2f350b241b8
SHA1

a9eb357f0c38637b024a5cada6929fd89cdceb46
SHA256

2907ab09d0e8e414e275fc03d5ce548d78405953d2a7cf73f93b7ae79a2f4459
SHA512

45a5ce03810929008ab4aea9965fcfdde73ff4afd9f0874250f2e5c68609cc6f33ac6f3da8a613e4b24a5718e179fe7b26945789251408d24478dd5800f59080
SSDEEP

6144:O2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:O2TFafJiHCWBWPMjVWrXK0

Score

7^/10

Malware Config

Targets

- Target
  
  c6d242b3186782422d32e2f350b241b8_mafia_nionspy_JC.exe
- Size
  
  327KB
- MD5
  
  c6d242b3186782422d32e2f350b241b8
- SHA1
  
  a9eb357f0c38637b024a5cada6929fd89cdceb46
- SHA256
  
  2907ab09d0e8e414e275fc03d5ce548d78405953d2a7cf73f93b7ae79a2f4459
- SHA512
  
  45a5ce03810929008ab4aea9965fcfdde73ff4afd9f0874250f2e5c68609cc6f33ac6f3da8a613e4b24a5718e179fe7b26945789251408d24478dd5800f59080
- SSDEEP
  
  6144:O2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:O2TFafJiHCWBWPMjVWrXK0
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2