Analysis
-
max time kernel
134s -
max time network
170s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
20-10-2023 09:41
General
-
Target
ShyTechOS-installer/ShyTechOS-istaller.exe
-
Size
1.3MB
-
MD5
6009d01604c27c4b34f9ce18ff39754f
-
SHA1
5f7c9fe3352e2f2cd369b3db123eee554ab27787
-
SHA256
ea0b3888b966aac8ba9ee37a05bca711db7fe23824213c0b101d3fafc4c4cd7f
-
SHA512
a852dde0502bf15de12ee67b36c5419f51727919d5e56195d72a171afbfbee1dc985ea1a3793f99aff4541c8f302883822c1469fc21736ca58ddf560b2861206
-
SSDEEP
24576:0TSTiRsBE12BIVpT2QhYpAILUo/g9QZqpMC3QVbIoTdWR8SfEuGujqZF13z8H81:0T7RseZDT2tSbvQsIbe8YVjPH81
Score
10/10
Malware Config
Signatures
-
Detect MafiaWare666 ransomware 1 IoCs
-
MafiaWare666 Ransomware
MafiaWare666 is ransomware written in C# with multiple variants.
-
Renames multiple (78) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops desktop.ini file(s) 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ShyTechOS-installer\ShyTechOS-istaller.exe"C:\Users\Admin\AppData\Local\Temp\ShyTechOS-installer\ShyTechOS-istaller.exe"1⤵
- Drops desktop.ini file(s)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
-
Filesize
7.7MB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
64KB
-
Filesize
7.7MB
-
Filesize
64KB
-
Filesize
64KB