mafiaware666 | 6e91c9b5d052842093c6c292ec8224755d376aba6172d94faa241d8b192cb265 | Triage

Sharing

General

Target

6e91c9b5d052842093c6c292ec8224755d376aba6172d94faa241d8b192cb265
Size

182KB
MD5

3bea60c117d46fd32d5d3a86a98befa5
SHA1

44348e1d4bfddbdea9bdff3b65136f5c9ba94329
SHA256

6e91c9b5d052842093c6c292ec8224755d376aba6172d94faa241d8b192cb265
SHA512

a08020463afc0eed6463e844ad689d144637998d5ab49f83a1473b7815b56a7607fe68b3aaf27b87ba8c3176cddad26e3ab6babbd630ce5a9d34b40c567331a1
SSDEEP

3072://5btPWv27xcRI7KmR3XatDLJb/dI7o7X1DfrNo9e/JsYX:/hbt42NcWR3Xwlb7X9rx

Score

10^/10

mafiaware666

Malware Config

Signatures

Detect MafiaWare666 ransomware 1 IoCs

resource	yara_rule
sample	family_mafiaware666

Mafiaware666 family
mafiaware666

Files

6e91c9b5d052842093c6c292ec8224755d376aba6172d94faa241d8b192cb265
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ