General

  • Target

    2024-03-07_a51bec75bfa224dc4c1105c5992961b3_mafia

  • Size

    436KB

  • MD5

    a51bec75bfa224dc4c1105c5992961b3

  • SHA1

    8ff6ba1567c616ed545a982afdfc00905c4465af

  • SHA256

    7d6a34a7bf1330c31ac80e5a0a4ad98f9afc7b2c66b4478f66b5e47fcf75cf78

  • SHA512

    d0c58922de56f32c235a58bf88d4ce6f258a984ef6a376c21086c46b87f1f7b8b6bc73e8a0be51c46e7ec4b45a451c06cb462486283e224b54d73a046f85ba1e

  • SSDEEP

    6144:oe/h0TMPIRSVfGXb195t8v9+uSA9fn1ybNJoFaGn6hV2AiCN:P/hNgMx4t88vkf1CNJoFFnS

Score
10/10

Malware Config

Signatures

  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-07_a51bec75bfa224dc4c1105c5992961b3_mafia
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections