Overview

overview

9

Static

static

3

2024-04-17...mi.exe

windows7-x64

9

2024-04-17...mi.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-17_d5963d1e58a396efcb0eab9398a175c8_mafia_wapomi

  • Size

    2.9MB

  • Sample

    240417-bawnyshb27

  • MD5

    d5963d1e58a396efcb0eab9398a175c8

  • SHA1

    a21232a4bc61d7ae74091484b6a9ed050101f9f0

  • SHA256

    88def65fc436c80a577072697fe18de9b58f948563f0ca373b29d05047fc3a1e

  • SHA512

    2d72c102cf98aa6b177f56bbe5fc844d5c855ad9e15264eb1dab86ed44ae67f73463ae953e6c50536ccc34145fe190a0fe08e223bb68e02af4f163bb68c800f1

  • SSDEEP

    49152:5WnAteSAYvPsqD2AQLRgcTPC4YEeZB92k0Z/6b9HC8ds1mqklFC76g4WRA0DayzC:FteSAYvPt2AQRTPCKez970Z/6b9HC8dt

Score
9/10
aspackv2

Malware Config

Targets

    • Target

      2024-04-17_d5963d1e58a396efcb0eab9398a175c8_mafia_wapomi

    • Size

      2.9MB

    • MD5

      d5963d1e58a396efcb0eab9398a175c8

    • SHA1

      a21232a4bc61d7ae74091484b6a9ed050101f9f0

    • SHA256

      88def65fc436c80a577072697fe18de9b58f948563f0ca373b29d05047fc3a1e

    • SHA512

      2d72c102cf98aa6b177f56bbe5fc844d5c855ad9e15264eb1dab86ed44ae67f73463ae953e6c50536ccc34145fe190a0fe08e223bb68e02af4f163bb68c800f1

    • SSDEEP

      49152:5WnAteSAYvPsqD2AQLRgcTPC4YEeZB92k0Z/6b9HC8ds1mqklFC76g4WRA0DayzC:FteSAYvPt2AQRTPCKez970Z/6b9HC8dt

    Score
    9/10
    aspackv2

    • Detects executables packed with ASPack

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks