General

  • Target

    2024-03-07_a608444a8025b6d57e859639b8c7a0a2_mafia

  • Size

    428KB

  • MD5

    a608444a8025b6d57e859639b8c7a0a2

  • SHA1

    eaad8583afe7edbb02e7e1135cde8bbbf4da7d6d

  • SHA256

    9955b0b8a1d02acfb7a00d785d8970ab55547e2c4a9d7b5eb3b9e9bf90d51dbd

  • SHA512

    b260acaae5e260d53c26cd4d668879a3d34048ce3eb26a5e2e9afa22480718ee5bee390e9747be2607020adf4b7c9d89d1645f90bd3e4a58cbe216eab19952d2

  • SSDEEP

    6144:5MqEHUkNqGVHhR5pW+JzUQQVgIvEwIdpeyRNKhr2AiTv:5MqEH+GVJNzULgekdpeUNEg

Score
10/10

Malware Config

Signatures

  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-07_a608444a8025b6d57e859639b8c7a0a2_mafia
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections