General

  • Target

    2024-03-12_84ea0c1b0f6f2dfef28eaf4edcb291c5_mafia

  • Size

    2.3MB

  • MD5

    84ea0c1b0f6f2dfef28eaf4edcb291c5

  • SHA1

    28b70831d4a52e1b7b9d9045d41323c8b2313314

  • SHA256

    e5af7c00fdfd8bdf62d8a8f80e142c910c6c58e7ec4d45158467e5ab78196e9f

  • SHA512

    98944d7a7a2a9bf9ad8b381e2bcf38ae97b09fe42b8e2037ad7d9214a88013766ce79a28ee0c3f54af03ce23e045ddd6dffd63bbe640232b0ead7e86b25f21d1

  • SSDEEP

    49152:ypEUgw14kZV2HXsMnmjEREseBSsxHnfXsrHYi2Yijibt2r4PRSEk1ul:kwYJYBt2sEE5

Score
10/10

Malware Config

Signatures

  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-12_84ea0c1b0f6f2dfef28eaf4edcb291c5_mafia
    .exe windows:5 windows x86 arch:x86

    136bea86936e01e1f983ef31dafa8b2a


    Headers

    Imports

    Sections