General
-
Target
5250e20520e90c3310cf95dc7dd07d0d_mafia_JC.exe
-
Size
308KB
-
Sample
230820-m3xbqsgd8y
-
MD5
5250e20520e90c3310cf95dc7dd07d0d
-
SHA1
d197f78dd686f7bdd1f8852d7e816e92df6c8ef7
-
SHA256
46b968b253009687dca7e8f8ebb17278d81b9a68827f56866607661e2800d0bc
-
SHA512
6693608610eb92e5061312e8be8845104a7e284fb21faf8a34deef5979d641b0a467533866992ceb01fce58eafe540efc3d07f1ac4ff9318a7b9e955333a3da5
-
SSDEEP
6144:fzL7ShWDLVzVNam6GxI29dqG3KdYAYqTuPZp:1DHNam62ZdKmZmuPH
Static task
static1
Behavioral task
behavioral1
Sample
5250e20520e90c3310cf95dc7dd07d0d_mafia_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5250e20520e90c3310cf95dc7dd07d0d_mafia_JC.exe
Resource
win10v2004-20230703-en
Malware Config
Targets
-
-
Target
5250e20520e90c3310cf95dc7dd07d0d_mafia_JC.exe
-
Size
308KB
-
MD5
5250e20520e90c3310cf95dc7dd07d0d
-
SHA1
d197f78dd686f7bdd1f8852d7e816e92df6c8ef7
-
SHA256
46b968b253009687dca7e8f8ebb17278d81b9a68827f56866607661e2800d0bc
-
SHA512
6693608610eb92e5061312e8be8845104a7e284fb21faf8a34deef5979d641b0a467533866992ceb01fce58eafe540efc3d07f1ac4ff9318a7b9e955333a3da5
-
SSDEEP
6144:fzL7ShWDLVzVNam6GxI29dqG3KdYAYqTuPZp:1DHNam62ZdKmZmuPH
Score10/10-
GandCrab payload
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-