General

  • Target

    WindowsFormsApp1.exe

  • Size

    14.5MB

  • Sample

    221226-xyssvsde65

  • MD5

    6c8868a84d7667ba67ba4458fa5acaac

  • SHA1

    1fd296e86f968d3b183d0caaaa5bcd79c95d9d1f

  • SHA256

    63f36d2eaa948f4e8625febe0ce7ae00b309dcb14572f3436dd259411a805808

  • SHA512

    f081767ec38815f51e5d55e722d8389e442991d91e2792221b793e2170c30f976dc53ac0142b277beb7ccad2e342e313e48003a478f6720d4681ff7cfb6e047a

  • SSDEEP

    196608:mz+BXp17ELB4ruPT6RbzNde8kfhifUG2hqSFMMAjqSFMMA:C2D88STIbzzzkfhiJ6JQJ

Malware Config

Targets

    • Target

      WindowsFormsApp1.exe

    • Size

      14.5MB

    • MD5

      6c8868a84d7667ba67ba4458fa5acaac

    • SHA1

      1fd296e86f968d3b183d0caaaa5bcd79c95d9d1f

    • SHA256

      63f36d2eaa948f4e8625febe0ce7ae00b309dcb14572f3436dd259411a805808

    • SHA512

      f081767ec38815f51e5d55e722d8389e442991d91e2792221b793e2170c30f976dc53ac0142b277beb7ccad2e342e313e48003a478f6720d4681ff7cfb6e047a

    • SSDEEP

      196608:mz+BXp17ELB4ruPT6RbzNde8kfhifUG2hqSFMMAjqSFMMA:C2D88STIbzzzkfhiJ6JQJ

    • Detect MafiaWare666 ransomware

    • MafiaWare666 Ransomware

      MafiaWare666 is ransomware written in C# with multiple variants.

    • Drops startup file

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks