General

  • Target

    2024-03-08_d8e7b548fb3f3829ead242c84188c76d_mafia

  • Size

    424KB

  • MD5

    d8e7b548fb3f3829ead242c84188c76d

  • SHA1

    f4a212901933182f4d2fc6a87b99d9a515535654

  • SHA256

    74fbf8a2ce37645c7e729eef83e2511760bcf138d12c7d335e414354454578b3

  • SHA512

    1e615fa6fe3de11ab97b162be5f8c73f1513547c2a04ea2f2069dec02efdd0f3d840e170443bc02a64c2a5143697eb3ae16ccb9b0c14a0f33908d07de6d2d59c

  • SSDEEP

    6144:B9XMgWCxEV+JM6FhWbkQm8GEPkiU23dSFAiDD1TRuhTEA:LMgWCxzJMvzGKki/3giiDBTR4

Score
10/10

Malware Config

Signatures

  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_d8e7b548fb3f3829ead242c84188c76d_mafia
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections