General

  • Target

    2024-03-13_37d2aa09dc45e5ba29b80c15a639c131_mafia

  • Size

    472KB

  • MD5

    37d2aa09dc45e5ba29b80c15a639c131

  • SHA1

    3591ac3d110a77be9758a34bc80e4916fc7c6df5

  • SHA256

    5ac5434f54676a87ba643fd892469f1b7f42e7f75db442eda140c134ee396fe8

  • SHA512

    7c16e99b91c772dcdf29a3aec7c1f59088d0cc9d7188ec1aa4277ce0351e0d557d69b4136d334603ab399c2ea921cd0cc6f983a77e187b899e1830cfb6a1b89e

  • SSDEEP

    6144:nCyiXVZhMMOP/AXh/PP6IEWEonebA8mUG05UJKH2khp9j5kz+i9moRQ4Jg4Eahr6:ndiXZMbKCxWIW+kmoRQ424EyiP4In

Score
10/10

Malware Config

Signatures

  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-13_37d2aa09dc45e5ba29b80c15a639c131_mafia
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections