General

  • Target

    tmp9AEC.tmp.bin.exe

  • Size

    491KB

  • Sample

    221016-v6522shgg7

  • MD5

    7025e419fd671779fc0b8d2fc7c05cb2

  • SHA1

    b6beedea2aaea31c19251737eb7be64d9b4a1b6c

  • SHA256

    d6fc6ebef39b6bf316912de44a7610966f738b4866b117240923d1a65ea6a3f0

  • SHA512

    6a014f9a79571bd3479535885b86646c6d96cf27253ee9f08cc906bb5f31ad3ac8845ee9443636a76c82c2a5267460b79b9677d8b3d8bedb0ddeb85ce2c9a1bc

  • SSDEEP

    3072:qC/zf+qP9BT1s2IytGqVToMdePYUd6zB9BkcbMP3lFIm+MNjpkbsvYWvvKwtv4qP:DzmcdBGxNY8Qj+YptsW6hxRspQQQQQ

Malware Config

Targets

    • Target

      tmp9AEC.tmp.bin.exe

    • Size

      491KB

    • MD5

      7025e419fd671779fc0b8d2fc7c05cb2

    • SHA1

      b6beedea2aaea31c19251737eb7be64d9b4a1b6c

    • SHA256

      d6fc6ebef39b6bf316912de44a7610966f738b4866b117240923d1a65ea6a3f0

    • SHA512

      6a014f9a79571bd3479535885b86646c6d96cf27253ee9f08cc906bb5f31ad3ac8845ee9443636a76c82c2a5267460b79b9677d8b3d8bedb0ddeb85ce2c9a1bc

    • SSDEEP

      3072:qC/zf+qP9BT1s2IytGqVToMdePYUd6zB9BkcbMP3lFIm+MNjpkbsvYWvvKwtv4qP:DzmcdBGxNY8Qj+YptsW6hxRspQQQQQ

    • Detect MafiaWare666 ransomware

    • MafiaWare666 Ransomware

      MafiaWare666 is ransomware written in C# with multiple variants.

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

    • Drops desktop.ini file(s)

MITRE ATT&CK Matrix

Tasks