General

  • Target

    2024-09-08_820efc3760c657eeb706cbe636688480_mafia_nionspy

  • Size

    344KB

  • Sample

    240909-abvmlsvbkg

  • MD5

    820efc3760c657eeb706cbe636688480

  • SHA1

    e2f6dddd6b7ee7b0366640f82868cb44a835094e

  • SHA256

    c7efdac12a9f806d4f2f9ccd487087ad1c62e3ac8f8731c284a86c2d80bedac0

  • SHA512

    fd594898c6e559c9b91997302e5795fe4fc4f80e435930e0b40f3cbb2f1d32bcbbbb573885ca44cd4afcd706598ae2324602458767196157a2c7f6509f6a8b2f

  • SSDEEP

    6144:BTz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:BTBPFV0RyWl3h2E+7pYm0

Score
7/10

Malware Config

Targets

    • Target

      2024-09-08_820efc3760c657eeb706cbe636688480_mafia_nionspy

    • Size

      344KB

    • MD5

      820efc3760c657eeb706cbe636688480

    • SHA1

      e2f6dddd6b7ee7b0366640f82868cb44a835094e

    • SHA256

      c7efdac12a9f806d4f2f9ccd487087ad1c62e3ac8f8731c284a86c2d80bedac0

    • SHA512

      fd594898c6e559c9b91997302e5795fe4fc4f80e435930e0b40f3cbb2f1d32bcbbbb573885ca44cd4afcd706598ae2324602458767196157a2c7f6509f6a8b2f

    • SSDEEP

      6144:BTz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:BTBPFV0RyWl3h2E+7pYm0

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks