General

  • Target

    18f4e4a6e2b9c28bb113fff5d0523f6fa041d9edbde249aa5ac0daa96f7e6081

  • Size

    198KB

  • Sample

    240122-3vkkzaeacj

  • MD5

    bc24cb92e654b5a6608807a78474b39e

  • SHA1

    5bcac146e4e2ccab18e53c26ee892610636b41a7

  • SHA256

    18f4e4a6e2b9c28bb113fff5d0523f6fa041d9edbde249aa5ac0daa96f7e6081

  • SHA512

    10d1db38ce6baf1cf11a73abc68b79675c3b51bd3c3950d0672df558984ce5e7f6be501c427445bd0dc8148f8f4912d5691e5b0dc99b383672901b77c947b689

  • SSDEEP

    1536:rpnaGkqzunSXT7lRTwItRxYDoJ57jECcxrE4l54KEI:tajSDnYDor/ECcxrEyAI

Malware Config

Targets

    • Target

      18f4e4a6e2b9c28bb113fff5d0523f6fa041d9edbde249aa5ac0daa96f7e6081

    • Size

      198KB

    • MD5

      bc24cb92e654b5a6608807a78474b39e

    • SHA1

      5bcac146e4e2ccab18e53c26ee892610636b41a7

    • SHA256

      18f4e4a6e2b9c28bb113fff5d0523f6fa041d9edbde249aa5ac0daa96f7e6081

    • SHA512

      10d1db38ce6baf1cf11a73abc68b79675c3b51bd3c3950d0672df558984ce5e7f6be501c427445bd0dc8148f8f4912d5691e5b0dc99b383672901b77c947b689

    • SSDEEP

      1536:rpnaGkqzunSXT7lRTwItRxYDoJ57jECcxrE4l54KEI:tajSDnYDor/ECcxrEyAI

    • Detect MafiaWare666 ransomware

    • MafiaWare666 Ransomware

      MafiaWare666 is ransomware written in C# with multiple variants.

    • Renames multiple (110) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks