Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
13-02-2024 18:00
General
-
Target
99c81a31830b094b2a481a8c03e9f9fc.exe
-
Size
1.3MB
-
MD5
99c81a31830b094b2a481a8c03e9f9fc
-
SHA1
edbf48a44b4103ffbe06d79af8bf5292ff5f36de
-
SHA256
bc71673003e3f83761875c04ccbefc29e92cf94bb402037ca03476a527790196
-
SHA512
834e72b45dc2564b60ea72cbd5ef895dbc80e9fd65a11665a22493cd2e16e0ef36cdf71cf2284e0ed37ffe22765a8e64b94ca8ce4a182bb3771bc727eec58242
-
SSDEEP
24576:eTSTiRsBE12BIVpT2QhYpAILUo/g9QZqpMC3QVbIoTdWR8SfEuGujqZF13z8H81:eT7RseZDT2tSbvQsIbe8YVjPH81
Score
10/10
Malware Config
Signatures
-
Detect MafiaWare666 ransomware 1 IoCs
-
MafiaWare666 Ransomware
MafiaWare666 is ransomware written in C# with multiple variants.
-
Renames multiple (68) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops desktop.ini file(s) 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\99c81a31830b094b2a481a8c03e9f9fc.exe"C:\Users\Admin\AppData\Local\Temp\99c81a31830b094b2a481a8c03e9f9fc.exe"1⤵
- Drops desktop.ini file(s)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
256KB