General

  • Target

    8437b6ed38b42bb447c9e9ad095105315d430b07b98b1b829ad314186c0c1752.exe

  • Size

    267KB

  • Sample

    221220-fhm41agg42

  • MD5

    ef2faf4191b9a3e622ec8496c653bc4c

  • SHA1

    adc4411fd1248f9846dc67c8978d5d553809b075

  • SHA256

    8437b6ed38b42bb447c9e9ad095105315d430b07b98b1b829ad314186c0c1752

  • SHA512

    fbc65375233b94bd5bfc69ddaf8a0367aaf5b3906b45f8d16ad56add1e97ef221993fc2dbced810017298ceef278b72e4f66d71601a0e7feb9f7a0e36f9f62ef

  • SSDEEP

    3072:eszNtrCvGJKHRMGM6y7CGtEKqljDjn+AaErIcIqaGqPIhkp/7oL0DDlUU8NH79BS:P7KHRMGM7/LqRh9kfGqPHhoL0/lUUaB

Malware Config

Targets

    • Target

      8437b6ed38b42bb447c9e9ad095105315d430b07b98b1b829ad314186c0c1752.exe

    • Size

      267KB

    • MD5

      ef2faf4191b9a3e622ec8496c653bc4c

    • SHA1

      adc4411fd1248f9846dc67c8978d5d553809b075

    • SHA256

      8437b6ed38b42bb447c9e9ad095105315d430b07b98b1b829ad314186c0c1752

    • SHA512

      fbc65375233b94bd5bfc69ddaf8a0367aaf5b3906b45f8d16ad56add1e97ef221993fc2dbced810017298ceef278b72e4f66d71601a0e7feb9f7a0e36f9f62ef

    • SSDEEP

      3072:eszNtrCvGJKHRMGM6y7CGtEKqljDjn+AaErIcIqaGqPIhkp/7oL0DDlUU8NH79BS:P7KHRMGM7/LqRh9kfGqPHhoL0/lUUaB

    • Detect MafiaWare666 ransomware

    • MafiaWare666 Ransomware

      MafiaWare666 is ransomware written in C# with multiple variants.

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

    • Drops desktop.ini file(s)

MITRE ATT&CK Matrix

Tasks