Analysis
-
max time kernel
91s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
21-12-2022 10:20
General
-
Target
aaa8dbb92ce458f0499725107eeed703243837acf79f489d20c4f3881c81fd50.exe
-
Size
1.3MB
-
MD5
2ef92f8ab2b6820d6eb559167676c1f4
-
SHA1
628121779da83ae14822129da6c14b2bfbb2f7d1
-
SHA256
aaa8dbb92ce458f0499725107eeed703243837acf79f489d20c4f3881c81fd50
-
SHA512
20fd0a4d367268e55033f6d7f700998b52775921f7c2993656379c4103daa3c7cc07f8a6a82d9ec948c6c1b427937af4df433ec24fdfa9ce88c9050de70c28dc
-
SSDEEP
24576:LTSTiRsBE12BIVpT2QhYpAILUo/g9QZqpMC3QVbIoTdWR8SfEuGujqZF13z8H81:LT7RseZDT2tSbvQsIbe8YVjPH81
Score
10/10
Malware Config
Signatures
-
Detect MafiaWare666 ransomware 1 IoCs
-
MafiaWare666 Ransomware
MafiaWare666 is ransomware written in C# with multiple variants.
-
Modifies extensions of user files 2 IoCs
Ransomware generally changes the extension on encrypted files.
-
Drops desktop.ini file(s) 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\aaa8dbb92ce458f0499725107eeed703243837acf79f489d20c4f3881c81fd50.exe"C:\Users\Admin\AppData\Local\Temp\aaa8dbb92ce458f0499725107eeed703243837acf79f489d20c4f3881c81fd50.exe"1⤵
- Modifies extensions of user files
- Drops desktop.ini file(s)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
40KB