General
-
Target
2024-04-20_15b14981186961909b32cfd5b674bfe7_mafia_wapomi
-
Size
187KB
-
Sample
240420-lcfqmaea2x
-
MD5
15b14981186961909b32cfd5b674bfe7
-
SHA1
7e48a2e9fb260537693c828a30217f4801ca79e4
-
SHA256
4288d92ac5862a1082e9f3faa7fa86f2ac55f8153f34760d3fb60e476f263aa0
-
SHA512
22e62a8bc8a1394a9fd025920d4854c361740dff55f70c8a7834598dc4d1863c850113b0805eac5b2214340392c1c5bd6373a73c976138aea16be2f46f5dee05
-
SSDEEP
3072:uLKCpw8DA3Yr3mUOJfXEEZnRCI3AXny/Hj8LG4MVj/FIgW6dvn3mxIOjGCH:e83YLmUOFXEEZnRCI3AXny/Hj8LG4ujr
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-20_15b14981186961909b32cfd5b674bfe7_mafia_wapomi.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-20_15b14981186961909b32cfd5b674bfe7_mafia_wapomi.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-20_15b14981186961909b32cfd5b674bfe7_mafia_wapomi
-
Size
187KB
-
MD5
15b14981186961909b32cfd5b674bfe7
-
SHA1
7e48a2e9fb260537693c828a30217f4801ca79e4
-
SHA256
4288d92ac5862a1082e9f3faa7fa86f2ac55f8153f34760d3fb60e476f263aa0
-
SHA512
22e62a8bc8a1394a9fd025920d4854c361740dff55f70c8a7834598dc4d1863c850113b0805eac5b2214340392c1c5bd6373a73c976138aea16be2f46f5dee05
-
SSDEEP
3072:uLKCpw8DA3Yr3mUOJfXEEZnRCI3AXny/Hj8LG4MVj/FIgW6dvn3mxIOjGCH:e83YLmUOFXEEZnRCI3AXny/Hj8LG4ujr
Score9/10-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-