5ee8e1987a230f7a113b65a2f3e65412c9f25c7c67c5b6398a203a3eafff26c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-18_12361bd256cc4195c90c648632a104f3_mafia_nionspy
Size

344KB
Sample

241018-ls36vssgkk
MD5

12361bd256cc4195c90c648632a104f3
SHA1

ca70ff442eacd76fcd72d16d8417fef9c9071a7d
SHA256

5ee8e1987a230f7a113b65a2f3e65412c9f25c7c67c5b6398a203a3eafff26c5
SHA512

15d25786012401c8dcc7b093809fc23fabfdefaa10b98e86dcdfb90ecef97a228b6a7b55742ed7e0529adfcbbe9a28ac73be59bd8655c2708168ed9a1541fbf2
SSDEEP

6144:BTz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:BTBPFV0RyWl3h2E+7pYm0

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-10-18_12361bd256cc4195c90c648632a104f3_mafia_nionspy
- Size
  
  344KB
- MD5
  
  12361bd256cc4195c90c648632a104f3
- SHA1
  
  ca70ff442eacd76fcd72d16d8417fef9c9071a7d
- SHA256
  
  5ee8e1987a230f7a113b65a2f3e65412c9f25c7c67c5b6398a203a3eafff26c5
- SHA512
  
  15d25786012401c8dcc7b093809fc23fabfdefaa10b98e86dcdfb90ecef97a228b6a7b55742ed7e0529adfcbbe9a28ac73be59bd8655c2708168ed9a1541fbf2
- SSDEEP
  
  6144:BTz+WrPFZvTXb4RyW42vFlOloh2E+7pYUozDBRm1+gmN:BTBPFV0RyWl3h2E+7pYm0
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2