General

  • Target

    64ddeb70fba7e6e624b64f81202f4be8c2d67cb82a13f57e49608a194e62575c.exe

  • Size

    1.3MB

  • Sample

    221223-arrwnaag2s

  • MD5

    41ef9dbf72a5620bb9d147843d6a3b1b

  • SHA1

    1a96cb861b49f92191098c4b64bb95bf314122d2

  • SHA256

    64ddeb70fba7e6e624b64f81202f4be8c2d67cb82a13f57e49608a194e62575c

  • SHA512

    346139501dcbdb5d2d2c06d41c001654c9891cb5de90e6e847bef6bcb9eb4703e5c65bbfc8f078f706f8caf543fda39186d53d572d2e1a0a648b61f450f982d0

  • SSDEEP

    24576:fTSTiRsBE12BIVpT2QhYpAILUo/g9QZqpMC3QVbIoTdWR8SfEuGujqZF13z8H81:fT7RseZDT2tSbvQsIbe8YVjPH81

Malware Config

Targets

    • Target

      64ddeb70fba7e6e624b64f81202f4be8c2d67cb82a13f57e49608a194e62575c.exe

    • Size

      1.3MB

    • MD5

      41ef9dbf72a5620bb9d147843d6a3b1b

    • SHA1

      1a96cb861b49f92191098c4b64bb95bf314122d2

    • SHA256

      64ddeb70fba7e6e624b64f81202f4be8c2d67cb82a13f57e49608a194e62575c

    • SHA512

      346139501dcbdb5d2d2c06d41c001654c9891cb5de90e6e847bef6bcb9eb4703e5c65bbfc8f078f706f8caf543fda39186d53d572d2e1a0a648b61f450f982d0

    • SSDEEP

      24576:fTSTiRsBE12BIVpT2QhYpAILUo/g9QZqpMC3QVbIoTdWR8SfEuGujqZF13z8H81:fT7RseZDT2tSbvQsIbe8YVjPH81

    • Detect MafiaWare666 ransomware

    • MafiaWare666 Ransomware

      MafiaWare666 is ransomware written in C# with multiple variants.

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

    • Drops desktop.ini file(s)

MITRE ATT&CK Matrix

Tasks