General

  • Target

    2024-03-07_d6c145fc61098b109ed971718bdd79b5_mafia

  • Size

    432KB

  • MD5

    d6c145fc61098b109ed971718bdd79b5

  • SHA1

    a840d4376f6518d5e54fb33687eaca6d79744886

  • SHA256

    747bbd5bde629deb19a38afbf93854261c62fbe9de456a099de3915e1e1c2886

  • SHA512

    ff333dc0d3da5e0232a72f0a0b02e75745088a22c16822281f85eb4ac59e14bd56f78244338b29b835b17cdd5f98d61e2e301f93f9028ec80b4d4e908f331fc5

  • SSDEEP

    6144:cuQRHexo0nwlQvG4IyynVKzVKJ5/eRFHVmGi//9o0wVEhKh+Ya:cuQRHexo0n24zVK32RRVmGiBwVbhz

Score
10/10

Malware Config

Signatures

  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-07_d6c145fc61098b109ed971718bdd79b5_mafia
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections