Resubmissions

12-04-2023 11:41

230412-ntr64ade2t 10

31-03-2023 17:39

230331-v8d2cadd8y 10

General

  • Target

    Ransomware.FancyLocker.zip

  • Size

    219KB

  • Sample

    230331-v8d2cadd8y

  • MD5

    be3950bad736dc09421b53368654b99e

  • SHA1

    c2c235f0c7350afb14292a39b7cee3f2de3d65b5

  • SHA256

    be9ed7b1e2219fb64293248dc95d0de3e74c27daa26e5f7ef743c74b58ef950d

  • SHA512

    cddb96ff8da84e1945f79f4d3a74737ab085fe1fbfd86acdd1ec24bbc970d44dcf7cf5b7bae979f182c9f011d6f2de15290dfdf4dd80ef92ab8de932e838e19f

  • SSDEEP

    6144:2vK8oJo2QTTGMIn5ipoBLmU9rTug4lMyMe/cGlrnDc:2y8aEn+spoBLmU9Xug42G/XrnDc

Malware Config

Targets

    • Target

      Ransomware.FancyLocker

    • Size

      322KB

    • MD5

      39f33d6842fa6495ccd7a41e8ddcb9b8

    • SHA1

      61cd2b3e22e2e6e514d611d3154e001f7e9fd195

    • SHA256

      416d2f821b7cb984859cfce43be981c5c9bc1489446ba41951c041d5801b65cb

    • SHA512

      97e8b15b82b70efebbf5cbfbbd4ac4925a7300049f5866bf01b59396de43c633342b5bc2ed657aae573c9f77e2dd20fe67234110aef048c49a2af9c8bd45dc29

    • SSDEEP

      3072:iMMFnguNpdYSkMXV2KMMEuWgY792XaY6UTuuAk2usbA+klAGPqhdp4efHxub8ehY:ideMXVeuWgY79OWpmq/yQxuAeS9Jb/

    • Detect MafiaWare666 ransomware

    • MafiaWare666 Ransomware

      MafiaWare666 is ransomware written in C# with multiple variants.

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

    • Drops desktop.ini file(s)

MITRE ATT&CK Matrix

Tasks