31e1fde58db06060601666c7b497a936706e3530a683538e94b6f322cd1fdf86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-19_2698986bc32c641fd49bc10ba9c70276_mafia_nionspy
Size

288KB
Sample

240819-kbz77sxaqm
MD5

2698986bc32c641fd49bc10ba9c70276
SHA1

5bdbf4bb7432f7aeb672b91134bd6bcb3ff294fe
SHA256

31e1fde58db06060601666c7b497a936706e3530a683538e94b6f322cd1fdf86
SHA512

3c523d7816e4893947321a4d9be3ec0e39d92b777d2487727bde019ef183a041814df5a87449acb3734ae668accebf8d9619054fb0c7a4288e5aae16698b859a
SSDEEP

6144:IQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:IQMyfmNFHfnWfhLZVHmOog

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-08-19_2698986bc32c641fd49bc10ba9c70276_mafia_nionspy
- Size
  
  288KB
- MD5
  
  2698986bc32c641fd49bc10ba9c70276
- SHA1
  
  5bdbf4bb7432f7aeb672b91134bd6bcb3ff294fe
- SHA256
  
  31e1fde58db06060601666c7b497a936706e3530a683538e94b6f322cd1fdf86
- SHA512
  
  3c523d7816e4893947321a4d9be3ec0e39d92b777d2487727bde019ef183a041814df5a87449acb3734ae668accebf8d9619054fb0c7a4288e5aae16698b859a
- SSDEEP
  
  6144:IQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:IQMyfmNFHfnWfhLZVHmOog
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2