726d24256f0c327a3dd59cd5a2fea31b504ae3da7ef7290c25bc1c2d42066376 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-12_47ae3b2ff38fd456c589e9f4c03d390f_mafia_nionspy
Size

279KB
Sample

240812-hscr5azenm
MD5

47ae3b2ff38fd456c589e9f4c03d390f
SHA1

8e068d0bde57720eed25e85dc9ee54746f5cb631
SHA256

726d24256f0c327a3dd59cd5a2fea31b504ae3da7ef7290c25bc1c2d42066376
SHA512

4fe5bc92bff51984c140bfecedcb3e4ce97e1aeff055348f63a561a8622cdfc1aed4a0e14953e4270e12110f1fbb26ce0dfe9b71a8cb1012158bd5799d34aeaa
SSDEEP

6144:KTz+WrPFZvTXb4RyW42vFlOloh2E+7phg7ozD:KTBPFV0RyWl3h2E+7ph

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-12_47ae3b2ff38fd456c589e9f4c03d390f_mafia_nionspy
- Size
  
  279KB
- MD5
  
  47ae3b2ff38fd456c589e9f4c03d390f
- SHA1
  
  8e068d0bde57720eed25e85dc9ee54746f5cb631
- SHA256
  
  726d24256f0c327a3dd59cd5a2fea31b504ae3da7ef7290c25bc1c2d42066376
- SHA512
  
  4fe5bc92bff51984c140bfecedcb3e4ce97e1aeff055348f63a561a8622cdfc1aed4a0e14953e4270e12110f1fbb26ce0dfe9b71a8cb1012158bd5799d34aeaa
- SSDEEP
  
  6144:KTz+WrPFZvTXb4RyW42vFlOloh2E+7phg7ozD:KTBPFV0RyWl3h2E+7ph
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2