General

  • Target

    2024-02-11_b965084e13bf50637e13b4bb57c0f504_mafia

  • Size

    2.3MB

  • MD5

    b965084e13bf50637e13b4bb57c0f504

  • SHA1

    7378d789bd0399af9bb8189cf46bf1d304e8fcc9

  • SHA256

    96b5ff9662b7432b4d6c0b183ca74b254ff209deb1eb8df020fb43d6ff35f162

  • SHA512

    d9abee580aaa0a0f56c3d5139c6b299f972248188f7dd0477d85ed60cca2318a3e496c05708f43e52429a8603dd4b28768783e9935661145dd8858696db9a548

  • SSDEEP

    49152:ApE9gw14kZV2HXsMnmjEREseBSsxHnfXsrHYi2Yijiaq0re0d37JWyAqAu:TwYJYcqOe0bWG9

Score
10/10

Malware Config

Signatures

  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-11_b965084e13bf50637e13b4bb57c0f504_mafia
    .exe windows:5 windows x86 arch:x86

    136bea86936e01e1f983ef31dafa8b2a


    Headers

    Imports

    Sections