General

  • Target

    2024-02-11_056498c365cff84be2a89529a590a334_mafia

  • Size

    2.3MB

  • MD5

    056498c365cff84be2a89529a590a334

  • SHA1

    b96270ab41f108e54aa650a26cffa2b2d725ab1d

  • SHA256

    27502290ffea3843f7dd5d9e5edb30f884fc9e70e825bdcb677589a1f772681e

  • SHA512

    9ae165c07c6e0df991dd4a19e945d2640badf0424eb20d77c14bfc2078c0f47d199dd0e9fdba8e222e49862718f681c00669e99c58bfeb0b9cf15417d13c82b5

  • SSDEEP

    49152:PpE9gw14kZV2HXsMnmjEREseBSsxHnfXsrHYi2Yijiaq0re0d37JWyAqAu:+wYJYcqOe0bWG9

Score
10/10

Malware Config

Signatures

  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-11_056498c365cff84be2a89529a590a334_mafia
    .exe windows:5 windows x86 arch:x86

    136bea86936e01e1f983ef31dafa8b2a


    Headers

    Imports

    Sections