General
-
Target
2024-07-25_5c8da85a4292797c67e8d8c414ce1622_mafia_wapomi
-
Size
1.6MB
-
Sample
240725-qmp49steqa
-
MD5
5c8da85a4292797c67e8d8c414ce1622
-
SHA1
81cf005d57bb278420d5343ada84356b08bed04c
-
SHA256
f3442f895870ff0c167e351f2e08ef258b5041d8679dda236440f233d9fe5649
-
SHA512
790cce4024a1e7c84a9e8a5e4e84081ba838e38ab1cd63ea332a99d002ec60c6fdb39157fbf092bfc244daa48c0fe84dc25d126fb90de799c2ea859a01ded6d2
-
SSDEEP
49152:XE4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/cionurM0EIMa1:Xrj834iwJjn7gu5LmMapuNiiMurM0
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-25_5c8da85a4292797c67e8d8c414ce1622_mafia_wapomi.exe
Resource
win7-20240705-en
Malware Config
Targets
-
-
Target
2024-07-25_5c8da85a4292797c67e8d8c414ce1622_mafia_wapomi
-
Size
1.6MB
-
MD5
5c8da85a4292797c67e8d8c414ce1622
-
SHA1
81cf005d57bb278420d5343ada84356b08bed04c
-
SHA256
f3442f895870ff0c167e351f2e08ef258b5041d8679dda236440f233d9fe5649
-
SHA512
790cce4024a1e7c84a9e8a5e4e84081ba838e38ab1cd63ea332a99d002ec60c6fdb39157fbf092bfc244daa48c0fe84dc25d126fb90de799c2ea859a01ded6d2
-
SSDEEP
49152:XE4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/cionurM0EIMa1:Xrj834iwJjn7gu5LmMapuNiiMurM0
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-