mafiaware666 | 221012-nbxc4adda8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

221012-nbxc4adda8
Size

1.1MB
MD5

52ca0a4cd932e61091d04bff0f927f51
SHA1

bd2cf4c800d907e568d8db3a2ecafa5fc8426079
SHA256

89ebe17b6dbb9dac780a4e2fe38da0261fa671cc79f4fe07cb9d26d9c0e447d2
SHA512

742011bf2fdd37e8fe33d1b3549f7d302a94dd1abff4885ff173272c88054710fcef740159ff8068a4227e8d7557e52674c11d6568501aa4d1359335ee7767fc
SSDEEP

24576:+b9wVn7NN9zvW/xAcQTMHt7WQNP6Rr54ZM+WTpAtJU45WCYJjeszBaDG:sSVN+/+MHtpG58M+WTpQJU45WCOieaDG

Score

10^/10

mafiaware666

Malware Config

Signatures

Detect MafiaWare666 ransomware 1 IoCs

resource	yara_rule
sample	family_mafiaware666

Mafiaware666 family
mafiaware666

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
221012-nbxc4adda8

Files

221012-nbxc4adda8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

/mnt/chromeos/MyFiles/Downloads/ddddd/EncrypterPOC-main/EncrypterPOC-main/WindowsFormsApp1/obj/Debug/WindowsFormsApp1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ