General

  • Target

    2024-03-06_f23b690ef5821737c46c3eef313ca2a9_mafia

  • Size

    452KB

  • MD5

    f23b690ef5821737c46c3eef313ca2a9

  • SHA1

    e02190360f29937d4f95f3d1d56c335fbdc302d5

  • SHA256

    b56f1563cf4ca495ac817950a6313260a6bcd8bbce0cad666d8602775ac6e200

  • SHA512

    9b3d6484310bddd14011542cf6c16a339c35ed9917254e5af45ad923c5b53356361778b10914f929c6e9235df4d316fb5665a6c8072123cbd8f62703ea48b2a3

  • SSDEEP

    6144:FjZi5dyACB0iCHcbk8ukYGFOg1i5HvEzhLJqyr:FjZgyAmk8uBGYg1i5HvEJJq

Score
10/10

Malware Config

Signatures

  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-06_f23b690ef5821737c46c3eef313ca2a9_mafia
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections