General

  • Target

    2024-03-28_5d43a6f9cb16b3478e24872860eb643b_mafia

  • Size

    23.4MB

  • MD5

    5d43a6f9cb16b3478e24872860eb643b

  • SHA1

    8f945e8616a1fcd3d334d4fb99fa9c55dd20eec1

  • SHA256

    e69ce753a5879f627928dcf425b5d155ea0010aa933239eb2c8b343aa7a55cd9

  • SHA512

    d1ec03874ef416ac6fac96f69397e2bba7b0d69331be84ab0c581f22762a9711ccdac9dac0f1d9bf6ae3488f380ddd963745f3803ead03239bc41f5255172d0e

  • SSDEEP

    6144:WkeehzAsTLPXhmXtI88Ndrb8R2edHdeNonXY+6g4uhXFJk:WkeehT7hpzg4C9eNonb4A

Score
10/10

Malware Config

Signatures

  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-28_5d43a6f9cb16b3478e24872860eb643b_mafia
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections