General

  • Target

    2024-03-05_d4d958d1ab3e8d1935a750a86aeb6fda_mafia

  • Size

    432KB

  • MD5

    d4d958d1ab3e8d1935a750a86aeb6fda

  • SHA1

    08d057e9d6b4e1519b70a3cf60402d7854d5c7e1

  • SHA256

    9bff16c40dd57213593797b6d32f9cca9403b50589e57433150e4ea358b72c4c

  • SHA512

    11e82d4de3226a381a8eb066d53caba1928ab91711158f38afacd0ad396e466e769dad00b92746286596624eeb913488e884332c3b901dcdfe38b8227ccdd6cf

  • SSDEEP

    6144:cDZmBlZ87p0vRhZ/u8AfjVO0M9qm9YNTjOYRGXhMNO5M:cDZmBi0BA7g0Wqm92jOYRGaEM

Score
10/10

Malware Config

Signatures

  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-05_d4d958d1ab3e8d1935a750a86aeb6fda_mafia
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections