5bc5ec2c338febf2b97df36aad4fb45b3aff987e071c23d148168888b0f5651e | Triage

Sharing

General

Target

NEAS.2023-09-08_3bd874975daedb1cc200a741c9e6d768_mafia_nionspy_JC.exe
Size

328KB
Sample

231031-t3aajabb5w
MD5

3bd874975daedb1cc200a741c9e6d768
SHA1

3e41c065543caf7d768a9fb33b494acaaf149019
SHA256

5bc5ec2c338febf2b97df36aad4fb45b3aff987e071c23d148168888b0f5651e
SHA512

ccc4ac8cd50ffd5947f50c897d7531ab1e507aea2409d035435371bda83b05826525e904a5256000634ed7a4e1e1aea2e96a5dd8b02906765f09c5bfff8b7ee8
SSDEEP

6144:+2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG89gkPzDh1v:+2TFafJiHCWBWPMjVWrXf1v

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.2023-09-08_3bd874975daedb1cc200a741c9e6d768_mafia_nionspy_JC.exe
- Size
  
  328KB
- MD5
  
  3bd874975daedb1cc200a741c9e6d768
- SHA1
  
  3e41c065543caf7d768a9fb33b494acaaf149019
- SHA256
  
  5bc5ec2c338febf2b97df36aad4fb45b3aff987e071c23d148168888b0f5651e
- SHA512
  
  ccc4ac8cd50ffd5947f50c897d7531ab1e507aea2409d035435371bda83b05826525e904a5256000634ed7a4e1e1aea2e96a5dd8b02906765f09c5bfff8b7ee8
- SSDEEP
  
  6144:+2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG89gkPzDh1v:+2TFafJiHCWBWPMjVWrXf1v
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2