24765a92c1cf5a149d312eb664e45ddaa781e8ead5aa25e0da28c8011426eb48 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-12_78a0f3833a6f0c1b8cc959949c4025d7_mafia_nionspy
Size

280KB
Sample

240812-cvlj6avgkc
MD5

78a0f3833a6f0c1b8cc959949c4025d7
SHA1

31feb26bb9c9bf33bac04378598cb8d6cdd9443a
SHA256

24765a92c1cf5a149d312eb664e45ddaa781e8ead5aa25e0da28c8011426eb48
SHA512

52ea32d95cf89318183ff7729e6a42ba81b73578720b9dbbd7802153c61a3d60218c9418b24a06fa8eb0acd4473d3d557c1e4139789a4ece0314a4ea80020a41
SSDEEP

6144:qQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:qQMyfmNFHfnWfhLZVHmOog

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-12_78a0f3833a6f0c1b8cc959949c4025d7_mafia_nionspy
- Size
  
  280KB
- MD5
  
  78a0f3833a6f0c1b8cc959949c4025d7
- SHA1
  
  31feb26bb9c9bf33bac04378598cb8d6cdd9443a
- SHA256
  
  24765a92c1cf5a149d312eb664e45ddaa781e8ead5aa25e0da28c8011426eb48
- SHA512
  
  52ea32d95cf89318183ff7729e6a42ba81b73578720b9dbbd7802153c61a3d60218c9418b24a06fa8eb0acd4473d3d557c1e4139789a4ece0314a4ea80020a41
- SSDEEP
  
  6144:qQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:qQMyfmNFHfnWfhLZVHmOog
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2