Analysis
-
max time kernel
48s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
16/10/2022, 17:37
General
-
Target
tmp9AEC.tmp.bin.exe
-
Size
491KB
-
MD5
7025e419fd671779fc0b8d2fc7c05cb2
-
SHA1
b6beedea2aaea31c19251737eb7be64d9b4a1b6c
-
SHA256
d6fc6ebef39b6bf316912de44a7610966f738b4866b117240923d1a65ea6a3f0
-
SHA512
6a014f9a79571bd3479535885b86646c6d96cf27253ee9f08cc906bb5f31ad3ac8845ee9443636a76c82c2a5267460b79b9677d8b3d8bedb0ddeb85ce2c9a1bc
-
SSDEEP
3072:qC/zf+qP9BT1s2IytGqVToMdePYUd6zB9BkcbMP3lFIm+MNjpkbsvYWvvKwtv4qP:DzmcdBGxNY8Qj+YptsW6hxRspQQQQQ
Score
10/10
Malware Config
Signatures
-
Detect MafiaWare666 ransomware 1 IoCs
-
MafiaWare666 Ransomware
MafiaWare666 is ransomware written in C# with multiple variants.
-
Modifies extensions of user files 12 IoCs
Ransomware generally changes the extension on encrypted files.
-
Drops desktop.ini file(s) 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\tmp9AEC.tmp.bin.exe"C:\Users\Admin\AppData\Local\Temp\tmp9AEC.tmp.bin.exe"1⤵
- Modifies extensions of user files
- Drops desktop.ini file(s)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
512KB
-
Filesize
8KB
-
Filesize
68KB