General

  • Target

    2024-03-12_6da4f2cd4800ca78e41c33a0a01fb32c_mafia_wapomi

  • Size

    187KB

  • Sample

    240312-s2ps6ace9y

  • MD5

    6da4f2cd4800ca78e41c33a0a01fb32c

  • SHA1

    f0a950373e22cee3efaf481a3fc3a53ba3842d99

  • SHA256

    5024fabaab5684bf65a560ae561e453744faac6808ff0ee2bb45a3ea294b74e2

  • SHA512

    56f9a3a37326717eb31475533e4e221abf6e61f067942acfccb79ecac98ee82dbeb525062082255a03b67939e285871d3ae40a7e4986162601ced58d1bd4fa43

  • SSDEEP

    3072:uLKCpw8DA3Yr3mUOJfXEEZnRCI3AXny/Hj8LG4MVj/FIgW6dvn3mxIOGGCH:e83YLmUOFXEEZnRCI3AXny/Hj8LG4ujy

Score
9/10

Malware Config

Targets

    • Target

      2024-03-12_6da4f2cd4800ca78e41c33a0a01fb32c_mafia_wapomi

    • Size

      187KB

    • MD5

      6da4f2cd4800ca78e41c33a0a01fb32c

    • SHA1

      f0a950373e22cee3efaf481a3fc3a53ba3842d99

    • SHA256

      5024fabaab5684bf65a560ae561e453744faac6808ff0ee2bb45a3ea294b74e2

    • SHA512

      56f9a3a37326717eb31475533e4e221abf6e61f067942acfccb79ecac98ee82dbeb525062082255a03b67939e285871d3ae40a7e4986162601ced58d1bd4fa43

    • SSDEEP

      3072:uLKCpw8DA3Yr3mUOJfXEEZnRCI3AXny/Hj8LG4MVj/FIgW6dvn3mxIOGGCH:e83YLmUOFXEEZnRCI3AXny/Hj8LG4ujy

    Score
    9/10
    • Detects executables packed with ASPack

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks