General

  • Target

    2024-03-05_a26d4bd2b161a39421b1b3bffcb9868a_mafia

  • Size

    432KB

  • MD5

    a26d4bd2b161a39421b1b3bffcb9868a

  • SHA1

    c9d81b0893b96cac0d742cdf0b19bb9aeb27d9b0

  • SHA256

    6098b49360c37b7ca84df89201844c88c7e621adfa1a766b809e2bca73dbd508

  • SHA512

    3d2c2fd8abeffa269b2ee6b4b39147e5b3c9419758dbcfe648f0b5b77fa532053760a3f295bba0147a171de34ffe53a505d2ef8b2a42cba7e11af814ff9a6f30

  • SSDEEP

    6144:j66+X5aG78XAIn2RN2iy3g8UpioUb65qJfbri5bMuCV4aeSqdBFJVtShVU:j6HX5aG782ook65G/id5CV5evZVt

Score
10/10

Malware Config

Signatures

  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-05_a26d4bd2b161a39421b1b3bffcb9868a_mafia
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections