67200d1e8209bf9bfd567af74037956155faabf59d777588a03b879e706cefa4 | Triage

Sharing

General

Target

2024-07-27_8e97205ff2b4c29bc253a8cb08b1858b_mafia_nionspy
Size

280KB
Sample

240727-mlnchavcll
MD5

8e97205ff2b4c29bc253a8cb08b1858b
SHA1

d2413d69ef34002232f2ad23fd6e2b2c19075a98
SHA256

67200d1e8209bf9bfd567af74037956155faabf59d777588a03b879e706cefa4
SHA512

6a19cd24ccb67fe7ebbbf68e0efde5ef2225884373bc98ca358c9d7edb8cce2d814f28a028781a8002e98e201237bd980e97b5439f39063127f59aa3d0545ff8
SSDEEP

6144:0Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:0QMyfmNFHfnWfhLZVHmOog

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-07-27_8e97205ff2b4c29bc253a8cb08b1858b_mafia_nionspy
- Size
  
  280KB
- MD5
  
  8e97205ff2b4c29bc253a8cb08b1858b
- SHA1
  
  d2413d69ef34002232f2ad23fd6e2b2c19075a98
- SHA256
  
  67200d1e8209bf9bfd567af74037956155faabf59d777588a03b879e706cefa4
- SHA512
  
  6a19cd24ccb67fe7ebbbf68e0efde5ef2225884373bc98ca358c9d7edb8cce2d814f28a028781a8002e98e201237bd980e97b5439f39063127f59aa3d0545ff8
- SSDEEP
  
  6144:0Q+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:0QMyfmNFHfnWfhLZVHmOog
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2