General
-
Target
2024-05-21_396023ae937d9cd7eea28c981d595c98_mafia_wapomi
-
Size
187KB
-
Sample
240521-3jsgfadf84
-
MD5
396023ae937d9cd7eea28c981d595c98
-
SHA1
955f83d2ac25ef84fc38259bcb8349746693009c
-
SHA256
eaa0ba0b04296242c84fc293b1e875489516109a414088b897bfa33559084331
-
SHA512
b9c3b82b8e64062d64e32752904afbfb24f0698babeb0035eaa761111285b948aeccbfb42b8ca95094de6349c5a99eda4309a15e3c728fffd3e2b30256cbc3dc
-
SSDEEP
3072:uLKCpw8DA3Yr3mUOJfXEEZnRCI3AXny/Hj8LG4MVj/FIgW6dvn3mxIOUGCH:e83YLmUOFXEEZnRCI3AXny/Hj8LG4ujI
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-21_396023ae937d9cd7eea28c981d595c98_mafia_wapomi.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-21_396023ae937d9cd7eea28c981d595c98_mafia_wapomi.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-05-21_396023ae937d9cd7eea28c981d595c98_mafia_wapomi
-
Size
187KB
-
MD5
396023ae937d9cd7eea28c981d595c98
-
SHA1
955f83d2ac25ef84fc38259bcb8349746693009c
-
SHA256
eaa0ba0b04296242c84fc293b1e875489516109a414088b897bfa33559084331
-
SHA512
b9c3b82b8e64062d64e32752904afbfb24f0698babeb0035eaa761111285b948aeccbfb42b8ca95094de6349c5a99eda4309a15e3c728fffd3e2b30256cbc3dc
-
SSDEEP
3072:uLKCpw8DA3Yr3mUOJfXEEZnRCI3AXny/Hj8LG4MVj/FIgW6dvn3mxIOUGCH:e83YLmUOFXEEZnRCI3AXny/Hj8LG4ujI
Score9/10-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-