General

  • Target

    2024-08-25_2d256b417429f5881c12ea6b0610659a_mafia_nionspy

  • Size

    280KB

  • Sample

    240825-llmwasxcmb

  • MD5

    2d256b417429f5881c12ea6b0610659a

  • SHA1

    1029294fe8c8b84076dd3fb3df789f3b97670481

  • SHA256

    3a195f86f279a701d4e10b88d3a1f4c3535c51d6f06062b91512610d8a7d713d

  • SHA512

    808bd546d78fe251c6c461351dd37e80f23494c65cf2f7ffc67aeb2c498ff1a594aabca5a4fc2a3565388839c2fef1cbac1b78d557330a88993040bc2f5ed440

  • SSDEEP

    6144:PQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:PQMyfmNFHfnWfhLZVHmOog

Score
7/10

Malware Config

Targets

    • Target

      2024-08-25_2d256b417429f5881c12ea6b0610659a_mafia_nionspy

    • Size

      280KB

    • MD5

      2d256b417429f5881c12ea6b0610659a

    • SHA1

      1029294fe8c8b84076dd3fb3df789f3b97670481

    • SHA256

      3a195f86f279a701d4e10b88d3a1f4c3535c51d6f06062b91512610d8a7d713d

    • SHA512

      808bd546d78fe251c6c461351dd37e80f23494c65cf2f7ffc67aeb2c498ff1a594aabca5a4fc2a3565388839c2fef1cbac1b78d557330a88993040bc2f5ed440

    • SSDEEP

      6144:PQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:PQMyfmNFHfnWfhLZVHmOog

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks