General
-
Target
2024-03-09_0a6f374e4e9c18fa0206731d2882cd10_mafia_nionspy
-
Size
274KB
-
Sample
240309-v9edhadf85
-
MD5
0a6f374e4e9c18fa0206731d2882cd10
-
SHA1
874c8fb1becce92b6d995e5cfb3880f18407f3ca
-
SHA256
00371caf883ccdb7812c778730dd92956e75683883b76839649e5832602b0add
-
SHA512
1a4a157034bcce43b8fbf522d14a32369721ca814ab86882d8151e80e08ff92119f4b1d0206a46d0c7c97abe4c7db70f4418ef232c68782de920377b369e1742
-
SSDEEP
6144:0YvZ6brUj+bvqHXSpWr2Kqz83Oad3Jg4PlPDIQ+KLzDDg:0YvEbrUjp3SpWggd3JBPlPDIQ3g
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-09_0a6f374e4e9c18fa0206731d2882cd10_mafia_nionspy.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-03-09_0a6f374e4e9c18fa0206731d2882cd10_mafia_nionspy.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-09_0a6f374e4e9c18fa0206731d2882cd10_mafia_nionspy
-
Size
274KB
-
MD5
0a6f374e4e9c18fa0206731d2882cd10
-
SHA1
874c8fb1becce92b6d995e5cfb3880f18407f3ca
-
SHA256
00371caf883ccdb7812c778730dd92956e75683883b76839649e5832602b0add
-
SHA512
1a4a157034bcce43b8fbf522d14a32369721ca814ab86882d8151e80e08ff92119f4b1d0206a46d0c7c97abe4c7db70f4418ef232c68782de920377b369e1742
-
SSDEEP
6144:0YvZ6brUj+bvqHXSpWr2Kqz83Oad3Jg4PlPDIQ+KLzDDg:0YvEbrUjp3SpWggd3JBPlPDIQ3g
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-