Analysis
-
max time kernel
91s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
20-12-2022 18:39
General
-
Target
64ddeb70fba7e6e624b64f81202f4be8c2d67cb82a13f57e49608a194e62575c.exe
-
Size
1.3MB
-
MD5
41ef9dbf72a5620bb9d147843d6a3b1b
-
SHA1
1a96cb861b49f92191098c4b64bb95bf314122d2
-
SHA256
64ddeb70fba7e6e624b64f81202f4be8c2d67cb82a13f57e49608a194e62575c
-
SHA512
346139501dcbdb5d2d2c06d41c001654c9891cb5de90e6e847bef6bcb9eb4703e5c65bbfc8f078f706f8caf543fda39186d53d572d2e1a0a648b61f450f982d0
-
SSDEEP
24576:fTSTiRsBE12BIVpT2QhYpAILUo/g9QZqpMC3QVbIoTdWR8SfEuGujqZF13z8H81:fT7RseZDT2tSbvQsIbe8YVjPH81
Score
10/10
Malware Config
Signatures
-
Detect MafiaWare666 ransomware 1 IoCs
-
MafiaWare666 Ransomware
MafiaWare666 is ransomware written in C# with multiple variants.
-
Modifies extensions of user files 3 IoCs
Ransomware generally changes the extension on encrypted files.
-
Drops desktop.ini file(s) 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\64ddeb70fba7e6e624b64f81202f4be8c2d67cb82a13f57e49608a194e62575c.exe"C:\Users\Admin\AppData\Local\Temp\64ddeb70fba7e6e624b64f81202f4be8c2d67cb82a13f57e49608a194e62575c.exe"1⤵
- Modifies extensions of user files
- Drops desktop.ini file(s)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
40KB