Overview

overview

10

Static

static

10

221012-nb9nesddb2.exe

windows7-x64

10

221012-nb9nesddb2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    221012-nb9nesddb2

  • Size

    2.3MB

  • Sample

    240228-naagyaab38

  • MD5

    3b2d877b0316f3ec4b20b79fe664c6ce

  • SHA1

    e004d6285d6921c788d6f5dc3ab02dc6bd9fe6d2

  • SHA256

    ee376851cb318f77b9c8b715a09c5c0ce11043f679bb39fa5b5d67242c1c3bb9

  • SHA512

    b4af15ee358c0e89c45cb70d3f867a5d455381fcff720411d2165cb7abd6cc43ef4f4c44ac779cc9790b35db543e8eaf60e81899b6bccb264dcc0397073882de

  • SSDEEP

    49152:JxrztpiklXTvvObVGrhmLql8a/LEmvUGw:ucvvOe4gq

Score
10/10
mafiaware666ransomware

Malware Config

Targets

    • Target

      221012-nb9nesddb2

    • Size

      2.3MB

    • MD5

      3b2d877b0316f3ec4b20b79fe664c6ce

    • SHA1

      e004d6285d6921c788d6f5dc3ab02dc6bd9fe6d2

    • SHA256

      ee376851cb318f77b9c8b715a09c5c0ce11043f679bb39fa5b5d67242c1c3bb9

    • SHA512

      b4af15ee358c0e89c45cb70d3f867a5d455381fcff720411d2165cb7abd6cc43ef4f4c44ac779cc9790b35db543e8eaf60e81899b6bccb264dcc0397073882de

    • SSDEEP

      49152:JxrztpiklXTvvObVGrhmLql8a/LEmvUGw:ucvvOe4gq

    Score
    10/10
    mafiaware666ransomware

    • Detect MafiaWare666 ransomware

    • MafiaWare666 Ransomware

      MafiaWare666 is ransomware written in C# with multiple variants.

      ransomwaremafiaware666

    • Renames multiple (68) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks