General
-
Target
2024-06-06_e030af86c6c0e1f49ac82345fdedd728_mafia_nionspy
-
Size
274KB
-
Sample
240606-x9ny2sbh92
-
MD5
e030af86c6c0e1f49ac82345fdedd728
-
SHA1
5e596f283d7d07c2252efcd50a02920b4f0f3da1
-
SHA256
d54d35bfdc2cf48b6441ee7d817bf7aacc77f1dd4e77164a382b6818a09f647b
-
SHA512
b5a2f5fadf3d2d1b9c71d5f8ee9b3e765a9f43555f6d375fb1a01b5e52183b717cbece1e0e66d4528bafb34ee0101811f0eec16f70afc09d053aa9f9d22bd555
-
SSDEEP
6144:2YvZ6brUj+bvqHXSpWr2Kqz83Oad3Jg4PlPDIQ+KLzDDg:2YvEbrUjp3SpWggd3JBPlPDIQ3g
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-06_e030af86c6c0e1f49ac82345fdedd728_mafia_nionspy.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-06-06_e030af86c6c0e1f49ac82345fdedd728_mafia_nionspy.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-06_e030af86c6c0e1f49ac82345fdedd728_mafia_nionspy
-
Size
274KB
-
MD5
e030af86c6c0e1f49ac82345fdedd728
-
SHA1
5e596f283d7d07c2252efcd50a02920b4f0f3da1
-
SHA256
d54d35bfdc2cf48b6441ee7d817bf7aacc77f1dd4e77164a382b6818a09f647b
-
SHA512
b5a2f5fadf3d2d1b9c71d5f8ee9b3e765a9f43555f6d375fb1a01b5e52183b717cbece1e0e66d4528bafb34ee0101811f0eec16f70afc09d053aa9f9d22bd555
-
SSDEEP
6144:2YvZ6brUj+bvqHXSpWr2Kqz83Oad3Jg4PlPDIQ+KLzDDg:2YvEbrUjp3SpWggd3JBPlPDIQ3g
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-