General
-
Target
Ransomware.FancyLocker.zip
-
Size
219KB
-
Sample
230331-v8d2cadd8y
-
MD5
be3950bad736dc09421b53368654b99e
-
SHA1
c2c235f0c7350afb14292a39b7cee3f2de3d65b5
-
SHA256
be9ed7b1e2219fb64293248dc95d0de3e74c27daa26e5f7ef743c74b58ef950d
-
SHA512
cddb96ff8da84e1945f79f4d3a74737ab085fe1fbfd86acdd1ec24bbc970d44dcf7cf5b7bae979f182c9f011d6f2de15290dfdf4dd80ef92ab8de932e838e19f
-
SSDEEP
6144:2vK8oJo2QTTGMIn5ipoBLmU9rTug4lMyMe/cGlrnDc:2y8aEn+spoBLmU9Xug42G/XrnDc
Behavioral task
behavioral1
Sample
Ransomware.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Ransomware.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
Ransomware.FancyLocker
-
Size
322KB
-
MD5
39f33d6842fa6495ccd7a41e8ddcb9b8
-
SHA1
61cd2b3e22e2e6e514d611d3154e001f7e9fd195
-
SHA256
416d2f821b7cb984859cfce43be981c5c9bc1489446ba41951c041d5801b65cb
-
SHA512
97e8b15b82b70efebbf5cbfbbd4ac4925a7300049f5866bf01b59396de43c633342b5bc2ed657aae573c9f77e2dd20fe67234110aef048c49a2af9c8bd45dc29
-
SSDEEP
3072:iMMFnguNpdYSkMXV2KMMEuWgY792XaY6UTuuAk2usbA+klAGPqhdp4efHxub8ehY:ideMXVeuWgY79OWpmq/yQxuAeS9Jb/
Score10/10-
Detect MafiaWare666 ransomware
-
MafiaWare666 Ransomware
MafiaWare666 is ransomware written in C# with multiple variants.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops desktop.ini file(s)
-