General
-
Target
2024-03-12_6da4f2cd4800ca78e41c33a0a01fb32c_mafia_wapomi
-
Size
187KB
-
Sample
240312-s2ps6ace9y
-
MD5
6da4f2cd4800ca78e41c33a0a01fb32c
-
SHA1
f0a950373e22cee3efaf481a3fc3a53ba3842d99
-
SHA256
5024fabaab5684bf65a560ae561e453744faac6808ff0ee2bb45a3ea294b74e2
-
SHA512
56f9a3a37326717eb31475533e4e221abf6e61f067942acfccb79ecac98ee82dbeb525062082255a03b67939e285871d3ae40a7e4986162601ced58d1bd4fa43
-
SSDEEP
3072:uLKCpw8DA3Yr3mUOJfXEEZnRCI3AXny/Hj8LG4MVj/FIgW6dvn3mxIOGGCH:e83YLmUOFXEEZnRCI3AXny/Hj8LG4ujy
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-12_6da4f2cd4800ca78e41c33a0a01fb32c_mafia_wapomi.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-12_6da4f2cd4800ca78e41c33a0a01fb32c_mafia_wapomi.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-12_6da4f2cd4800ca78e41c33a0a01fb32c_mafia_wapomi
-
Size
187KB
-
MD5
6da4f2cd4800ca78e41c33a0a01fb32c
-
SHA1
f0a950373e22cee3efaf481a3fc3a53ba3842d99
-
SHA256
5024fabaab5684bf65a560ae561e453744faac6808ff0ee2bb45a3ea294b74e2
-
SHA512
56f9a3a37326717eb31475533e4e221abf6e61f067942acfccb79ecac98ee82dbeb525062082255a03b67939e285871d3ae40a7e4986162601ced58d1bd4fa43
-
SSDEEP
3072:uLKCpw8DA3Yr3mUOJfXEEZnRCI3AXny/Hj8LG4MVj/FIgW6dvn3mxIOGGCH:e83YLmUOFXEEZnRCI3AXny/Hj8LG4ujy
Score9/10-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-