General
-
Target
2024-05-22_b70976a44e3d453d9576b5563a87d62a_mafia_nionspy
-
Size
274KB
-
Sample
240522-3qm6asdf57
-
MD5
b70976a44e3d453d9576b5563a87d62a
-
SHA1
1ffcb8acc68e296f4be4b466d1ae24b073d1cd49
-
SHA256
8f094a5790367ef70031ef36df3c254ea8d4f370252c211045a537b435043447
-
SHA512
3fa3708757052179939cddf69d7366285083eb977497856c627025885cfbc2c8ea873ac0d3eef7bce47a756a501821ccbab205e556e32e276daec7a44288589d
-
SSDEEP
6144:rYvZ6brUj+bvqHXSpWr2Kqz83Oad3Jg4PlPDIQ+KLzDDg:rYvEbrUjp3SpWggd3JBPlPDIQ3g
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_b70976a44e3d453d9576b5563a87d62a_mafia_nionspy.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-22_b70976a44e3d453d9576b5563a87d62a_mafia_nionspy.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-22_b70976a44e3d453d9576b5563a87d62a_mafia_nionspy
-
Size
274KB
-
MD5
b70976a44e3d453d9576b5563a87d62a
-
SHA1
1ffcb8acc68e296f4be4b466d1ae24b073d1cd49
-
SHA256
8f094a5790367ef70031ef36df3c254ea8d4f370252c211045a537b435043447
-
SHA512
3fa3708757052179939cddf69d7366285083eb977497856c627025885cfbc2c8ea873ac0d3eef7bce47a756a501821ccbab205e556e32e276daec7a44288589d
-
SSDEEP
6144:rYvZ6brUj+bvqHXSpWr2Kqz83Oad3Jg4PlPDIQ+KLzDDg:rYvEbrUjp3SpWggd3JBPlPDIQ3g
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-