General
-
Target
2024-03-08_eb8f8ab6331754adc0909434516b978a_mafia
-
Size
467KB
-
Sample
240308-ek7ezseg79
-
MD5
eb8f8ab6331754adc0909434516b978a
-
SHA1
58a864b065d4e7c338cb0be1d7c94794eb250c5a
-
SHA256
88a5ca7b5cb1dab643433b58af5251b935b12cd850193e2f980cea679daaa8af
-
SHA512
b6bad0ca1624ce98171ba1c4cf85f0f97ad372e901fecca6e07853658320aa32b00211184876abdb0057a88cf40a9e89fb0b0bbd48d6780e876eb162535331a3
-
SSDEEP
12288:Bb4bZudi79LOgEq/TxyPW1fAxscyeqTAk:Bb4bcdkLOgEDW1Kscyeu
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-08_eb8f8ab6331754adc0909434516b978a_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-08_eb8f8ab6331754adc0909434516b978a_mafia.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-08_eb8f8ab6331754adc0909434516b978a_mafia
-
Size
467KB
-
MD5
eb8f8ab6331754adc0909434516b978a
-
SHA1
58a864b065d4e7c338cb0be1d7c94794eb250c5a
-
SHA256
88a5ca7b5cb1dab643433b58af5251b935b12cd850193e2f980cea679daaa8af
-
SHA512
b6bad0ca1624ce98171ba1c4cf85f0f97ad372e901fecca6e07853658320aa32b00211184876abdb0057a88cf40a9e89fb0b0bbd48d6780e876eb162535331a3
-
SSDEEP
12288:Bb4bZudi79LOgEq/TxyPW1fAxscyeqTAk:Bb4bcdkLOgEDW1Kscyeu
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-