General
-
Target
2024-03-28_4bae7aeea88342d0e4c95d6dc57fa8d7_mafia
-
Size
316KB
-
Sample
240328-hdvz6aeg8t
-
MD5
4bae7aeea88342d0e4c95d6dc57fa8d7
-
SHA1
48e9fc160a0bcb82c6220f53650710a6adf3b143
-
SHA256
2c94363a778a3f170d86cfc67e9249e17d8fef651f7d5cbcac3e1dadeb66d588
-
SHA512
e5613e5f5a8e7b2a85cbeb4514526475ddbbd7f342abb379c37fceade5352966ef85f4a7a884a58b7ea14e8815039ac47a6530e6169872cd4a5af080cfb49f84
-
SSDEEP
6144:2vExNMO1UnseVgkV0xwvfxnhLTiusLe1740/:5TM0Unsna5mut40/
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-28_4bae7aeea88342d0e4c95d6dc57fa8d7_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-28_4bae7aeea88342d0e4c95d6dc57fa8d7_mafia.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-28_4bae7aeea88342d0e4c95d6dc57fa8d7_mafia
-
Size
316KB
-
MD5
4bae7aeea88342d0e4c95d6dc57fa8d7
-
SHA1
48e9fc160a0bcb82c6220f53650710a6adf3b143
-
SHA256
2c94363a778a3f170d86cfc67e9249e17d8fef651f7d5cbcac3e1dadeb66d588
-
SHA512
e5613e5f5a8e7b2a85cbeb4514526475ddbbd7f342abb379c37fceade5352966ef85f4a7a884a58b7ea14e8815039ac47a6530e6169872cd4a5af080cfb49f84
-
SSDEEP
6144:2vExNMO1UnseVgkV0xwvfxnhLTiusLe1740/:5TM0Unsna5mut40/
Score10/10-
GandCrab payload
-
Detects Reflective DLL injection artifacts
-
Detects ransomware indicator
-
Gandcrab Payload
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-