General

  • Target

    936565a7d3722051ea0477f886575304ce7abf0efc6fe8019f9a6ea11e85db12

  • Size

    3.4MB

  • MD5

    2934910d0947504c29a5c4cc438b1ad1

  • SHA1

    d65721473f8436968b252efe564ba8709a5d24cc

  • SHA256

    936565a7d3722051ea0477f886575304ce7abf0efc6fe8019f9a6ea11e85db12

  • SHA512

    07514bc98028923e53cc0a9c1fb385440948a1770e86dfb9a417fe0f7f96ddf218e0a7a0697c91fca9fbabb442ad3d55e808f5fc2825ef860519e831a22b12ae

  • SSDEEP

    24576:po/CW54IAnWrfdt2Zj1vpo4ajyKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKQ:/IAWjdAp1PagjLuSh3i+FtvkMzT+

Malware Config

Signatures

  • Detect MafiaWare666 ransomware 1 IoCs
  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables packed with ConfuserEx Mod 1 IoCs
  • MAKOP ransomware payload 1 IoCs
  • Mafiaware666 family
  • Makop family
  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 936565a7d3722051ea0477f886575304ce7abf0efc6fe8019f9a6ea11e85db12
    .exe windows:4 windows x86 arch:x86

    364f4eb85abb3fe033aa9cfae7ac6b24


    Headers

    Imports

    Sections