General
-
Target
2024-01-25_14841626aafdc901eef87a0caa146766_mafia_nionspy
-
Size
288KB
-
Sample
240125-txwatabeal
-
MD5
14841626aafdc901eef87a0caa146766
-
SHA1
451d7c145bfbdf9a0fd5cee42627eb4f7d48d72f
-
SHA256
54f78bfaea6c1f2938875cadd4060e5ca115d5445b1b6f8f3b5a617fae90e045
-
SHA512
959fd81fb5cbac4ffcd9b6edc983cc4aca5fd4a9acd8cf4f6439c642582bda20e98e090128558f719ea4018bfd8c9e56e069b053eb3af73e24fda726291e8659
-
SSDEEP
6144:XuQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:+QMyfmNFHfnWfhLZVHmOog
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_14841626aafdc901eef87a0caa146766_mafia_nionspy.exe
Resource
win7-20231215-en
Malware Config
Targets
-
-
Target
2024-01-25_14841626aafdc901eef87a0caa146766_mafia_nionspy
-
Size
288KB
-
MD5
14841626aafdc901eef87a0caa146766
-
SHA1
451d7c145bfbdf9a0fd5cee42627eb4f7d48d72f
-
SHA256
54f78bfaea6c1f2938875cadd4060e5ca115d5445b1b6f8f3b5a617fae90e045
-
SHA512
959fd81fb5cbac4ffcd9b6edc983cc4aca5fd4a9acd8cf4f6439c642582bda20e98e090128558f719ea4018bfd8c9e56e069b053eb3af73e24fda726291e8659
-
SSDEEP
6144:XuQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:+QMyfmNFHfnWfhLZVHmOog
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-