d79c77af7dd10071eae23bf47cb4c1508d07aa65c4f28f5f1341cd042f2dd5cc | Triage

Sharing

General

Target

2023-08-22_75d6c1f8dd903351c6dac7cc7022123f_mafia_nionspy_JC.exe
Size

328KB
Sample

230902-x4mh2afb9x
MD5

75d6c1f8dd903351c6dac7cc7022123f
SHA1

c097726cabd8085ba216919c34b8cfcf87d7dc9d
SHA256

d79c77af7dd10071eae23bf47cb4c1508d07aa65c4f28f5f1341cd042f2dd5cc
SHA512

2b8ed2d8a2701110b7e8fe08383d1f64cca1850addbe50b38e78ef40ce0e1caad07cec967f9f32daa068ba414702d2ab28fdcc9bfcdf9eb76ce95a2b06ceca20
SSDEEP

6144:b2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG89gkPzDh1v:b2TFafJiHCWBWPMjVWrXf1v

Score

7^/10

Malware Config

Targets

- Target
  
  2023-08-22_75d6c1f8dd903351c6dac7cc7022123f_mafia_nionspy_JC.exe
- Size
  
  328KB
- MD5
  
  75d6c1f8dd903351c6dac7cc7022123f
- SHA1
  
  c097726cabd8085ba216919c34b8cfcf87d7dc9d
- SHA256
  
  d79c77af7dd10071eae23bf47cb4c1508d07aa65c4f28f5f1341cd042f2dd5cc
- SHA512
  
  2b8ed2d8a2701110b7e8fe08383d1f64cca1850addbe50b38e78ef40ce0e1caad07cec967f9f32daa068ba414702d2ab28fdcc9bfcdf9eb76ce95a2b06ceca20
- SSDEEP
  
  6144:b2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG89gkPzDh1v:b2TFafJiHCWBWPMjVWrXf1v
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2