General

  • Target

    2024-03-05_98711aae55815a6702fef31d96233a46_mafia

  • Size

    432KB

  • MD5

    98711aae55815a6702fef31d96233a46

  • SHA1

    a4084fc271b762c536e5fe8ecc618e676346d06c

  • SHA256

    ec80dfd2130531b4c39ca15b919600c9b7163df11d81b0b8631665f672516fd3

  • SHA512

    f15cf977adb83aab15d31143bcd99251f7cb355458d58dee4634d7c06b65251206eb2579c980ecf6f68e7c2bf5646fc1e862ee0b02bc95b10b79dd2f14adace8

  • SSDEEP

    6144:cDZmBlZ87p0vRhZ/u8AfjVO0M9qm9YzYTjOYRGXhMNJaM:cDZmBi0BA7g0Wqm9YGjOYRGa0M

Score
10/10

Malware Config

Signatures

  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-05_98711aae55815a6702fef31d96233a46_mafia
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections