General

  • Target

    2024-06-10_2c0cf30149dab39229b64a78c3eda531_mafia_nionspy

  • Size

    344KB

  • Sample

    240610-ejmdescd75

  • MD5

    2c0cf30149dab39229b64a78c3eda531

  • SHA1

    0dc8f1eeafd6dde95322e47bbec6f6fce0140d09

  • SHA256

    7de1e7f9150ef8451d067207ff13350a8b3767d93c86cf504fab57e92ad7a57a

  • SHA512

    ef71c76a208406a931ae14ca2861e30f140e6ce1e1e7df009d0d5816fe976746f3681fac55e2ea9f8452cc6962d5c0f54d5e26e587f8d759cd6f680d389389cb

  • SSDEEP

    6144:STz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:STBPFV0RyWl3h2E+7pYm0

Score
7/10

Malware Config

Targets

    • Target

      2024-06-10_2c0cf30149dab39229b64a78c3eda531_mafia_nionspy

    • Size

      344KB

    • MD5

      2c0cf30149dab39229b64a78c3eda531

    • SHA1

      0dc8f1eeafd6dde95322e47bbec6f6fce0140d09

    • SHA256

      7de1e7f9150ef8451d067207ff13350a8b3767d93c86cf504fab57e92ad7a57a

    • SHA512

      ef71c76a208406a931ae14ca2861e30f140e6ce1e1e7df009d0d5816fe976746f3681fac55e2ea9f8452cc6962d5c0f54d5e26e587f8d759cd6f680d389389cb

    • SSDEEP

      6144:STz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:STBPFV0RyWl3h2E+7pYm0

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks