General
- Target 2024-06-03_c5ca130f855047362fce4f5defc37886_mafia_nionspy
- Size 348KB
- Sample240603-nw8a4adc81
- SHA256 547e5e4bef334a1744fb9db428e570445627b778f3e17012bcf27ab93ae0be5f
- MD5 c5ca130f855047362fce4f5defc37886
- SHA1 19c3faef92e927e102531c70aff767f1b40ffea8
- SHA512 2d38112837e0f8d45a3daecd17dce3cf3524b3aede25cf48b52b06800ae78f61647229844d5c1cb03e6bd5abb6da6b67e66df9cf02cd6b25977274130e43970e
- SSDEEP 6144:v2+JS2sFZfI8U0obHCW/2a7XQcsPMjVWr289gkPzDhmv:v2TFZfJiHCWBWPMjVWrHfmv
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-06-03_c5ca130f855047362fce4f5defc37886_mafia_nionspy.exe
Resource
win7-20240508-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-03_c5ca130f855047362fce4f5defc37886_mafia_nionspy.exe
Resource
win10v2004-20240426-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-03_c5ca130f855047362fce4f5defc37886_mafia_nionspy
- Size 348KB
- SHA256 547e5e4bef334a1744fb9db428e570445627b778f3e17012bcf27ab93ae0be5f
- MD5 c5ca130f855047362fce4f5defc37886
- SHA1 19c3faef92e927e102531c70aff767f1b40ffea8
- SHA512 2d38112837e0f8d45a3daecd17dce3cf3524b3aede25cf48b52b06800ae78f61647229844d5c1cb03e6bd5abb6da6b67e66df9cf02cd6b25977274130e43970e
- SSDEEP 6144:v2+JS2sFZfI8U0obHCW/2a7XQcsPMjVWr289gkPzDhmv:v2TFZfJiHCWBWPMjVWrHfmv
- MD5 SHA1 SHA512 SSDEEP
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL