General

  • Target

    2024-03-12_4d9167a055f28fa7a34b0ff9b1b0df90_mafia

  • Size

    4.1MB

  • MD5

    4d9167a055f28fa7a34b0ff9b1b0df90

  • SHA1

    5368170a48fd95e2af4264a0bb988c58a589ac8c

  • SHA256

    b26a331bf6856b3aa2177fab47afba218fa4d087979c6625898fba2f72325bcd

  • SHA512

    7fdc6a68d4196c46ae5b600e1a08638de55ee397a60dd144a51237009c7f87e99f488012b0707f22707b539fcf870f32b5dc855a88c003fa909c5a60584f9a70

  • SSDEEP

    6144:CDZmBlZ87p0vRhZ/u8AfjVO0M9qm9YfTjOYRLXhMNOUMlTi:CDZmBi0BA7g0Wqm9sjOYRLaZM0

Score
10/10

Malware Config

Signatures

  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-12_4d9167a055f28fa7a34b0ff9b1b0df90_mafia
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections