General

  • Target

    2024-01-24_b188968fdba7f30823cc0f400ce7b207_mafia

  • Size

    2.3MB

  • MD5

    b188968fdba7f30823cc0f400ce7b207

  • SHA1

    b77c3da7251aa0ace864710d9756b0da3f6eab82

  • SHA256

    a65da5da84c202b2136e54a74f0f23779e6e7d39f100906d4abb87f379112d15

  • SHA512

    1d701895e8e3c5fb04467f1d3a2ab4c7b30059846db40d0c80476b18adba1824619fe6f359b44affb51b269b956611889e3295fc703c6cc1c1dee59c8fed3ac6

  • SSDEEP

    49152:MpE6gw14kZV2HXsMnmjEREseBSsxHnfXsrHYi2Yijic8zVU4wk5/BDGP0:gwYJYRzzz5/BDGP

Score
10/10

Malware Config

Signatures

  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-24_b188968fdba7f30823cc0f400ce7b207_mafia
    .exe windows:5 windows x86 arch:x86

    136bea86936e01e1f983ef31dafa8b2a


    Headers

    Imports

    Sections