General

  • Target

    8c1344abfab3ca04edc09823d638791c

  • Size

    228KB

  • Sample

    231226-y6jqlaeca6

  • MD5

    8c1344abfab3ca04edc09823d638791c

  • SHA1

    b45968fef318759b3f82ae7759d0e284099e5617

  • SHA256

    a3bc02793e389eca1d2d3eab3ad4925b50ad90d64d66e418789b62144a5f8f74

  • SHA512

    9ded3851cb4ee2649639f19b2c2e882c4fecab4fa98114241dacc082d52d268c793ff082463395b8e57af8ccc69da46e016757b676d025c50e74b71da960622c

  • SSDEEP

    6144:KL8DfeMXVeuWgY79OWpmq/yQxuAeS9Jb/:KQKgeuWgO99pj/Txuu

Malware Config

Targets

    • Target

      8c1344abfab3ca04edc09823d638791c

    • Size

      228KB

    • MD5

      8c1344abfab3ca04edc09823d638791c

    • SHA1

      b45968fef318759b3f82ae7759d0e284099e5617

    • SHA256

      a3bc02793e389eca1d2d3eab3ad4925b50ad90d64d66e418789b62144a5f8f74

    • SHA512

      9ded3851cb4ee2649639f19b2c2e882c4fecab4fa98114241dacc082d52d268c793ff082463395b8e57af8ccc69da46e016757b676d025c50e74b71da960622c

    • SSDEEP

      6144:KL8DfeMXVeuWgY79OWpmq/yQxuAeS9Jb/:KQKgeuWgO99pj/Txuu

    • Detect MafiaWare666 ransomware

    • MafiaWare666 Ransomware

      MafiaWare666 is ransomware written in C# with multiple variants.

    • Renames multiple (95) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Drops desktop.ini file(s)

MITRE ATT&CK Matrix

Tasks