General

  • Target

    2024-07-25_5c8da85a4292797c67e8d8c414ce1622_mafia_wapomi

  • Size

    1.6MB

  • Sample

    240725-qmp49steqa

  • MD5

    5c8da85a4292797c67e8d8c414ce1622

  • SHA1

    81cf005d57bb278420d5343ada84356b08bed04c

  • SHA256

    f3442f895870ff0c167e351f2e08ef258b5041d8679dda236440f233d9fe5649

  • SHA512

    790cce4024a1e7c84a9e8a5e4e84081ba838e38ab1cd63ea332a99d002ec60c6fdb39157fbf092bfc244daa48c0fe84dc25d126fb90de799c2ea859a01ded6d2

  • SSDEEP

    49152:XE4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/cionurM0EIMa1:Xrj834iwJjn7gu5LmMapuNiiMurM0

Score
7/10

Malware Config

Targets

    • Target

      2024-07-25_5c8da85a4292797c67e8d8c414ce1622_mafia_wapomi

    • Size

      1.6MB

    • MD5

      5c8da85a4292797c67e8d8c414ce1622

    • SHA1

      81cf005d57bb278420d5343ada84356b08bed04c

    • SHA256

      f3442f895870ff0c167e351f2e08ef258b5041d8679dda236440f233d9fe5649

    • SHA512

      790cce4024a1e7c84a9e8a5e4e84081ba838e38ab1cd63ea332a99d002ec60c6fdb39157fbf092bfc244daa48c0fe84dc25d126fb90de799c2ea859a01ded6d2

    • SSDEEP

      49152:XE4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/cionurM0EIMa1:Xrj834iwJjn7gu5LmMapuNiiMurM0

    Score
    7/10
    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks