General
-
Target
2024-03-29_4d2ac73884ba26c35cf42f2ef3842db1_mafia
-
Size
300KB
-
Sample
240329-ay3xhadd84
-
MD5
4d2ac73884ba26c35cf42f2ef3842db1
-
SHA1
064703dc37c642c0b4011be54a99a2cab44a6886
-
SHA256
98efbcca31732251b00867ce22fd371e3834cbb8a9eb03d13d2a944bfaf77f9d
-
SHA512
6f0188e218817b7659551609315b3cf9499d85cd08d48d99b6020e300dadaec20b56d99c016ddadc25b90972d30dacd92bccac275ef0f853b96056daa6ee60ab
-
SSDEEP
6144:3vEANMO1UnseVgkV0xwvfxnhLTiusLe1740B:cuM0Unsna5mut40B
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-29_4d2ac73884ba26c35cf42f2ef3842db1_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-29_4d2ac73884ba26c35cf42f2ef3842db1_mafia.exe
Resource
win10v2004-20240319-en
Malware Config
Targets
-
-
Target
2024-03-29_4d2ac73884ba26c35cf42f2ef3842db1_mafia
-
Size
300KB
-
MD5
4d2ac73884ba26c35cf42f2ef3842db1
-
SHA1
064703dc37c642c0b4011be54a99a2cab44a6886
-
SHA256
98efbcca31732251b00867ce22fd371e3834cbb8a9eb03d13d2a944bfaf77f9d
-
SHA512
6f0188e218817b7659551609315b3cf9499d85cd08d48d99b6020e300dadaec20b56d99c016ddadc25b90972d30dacd92bccac275ef0f853b96056daa6ee60ab
-
SSDEEP
6144:3vEANMO1UnseVgkV0xwvfxnhLTiusLe1740B:cuM0Unsna5mut40B
Score10/10-
GandCrab payload
-
Detects Reflective DLL injection artifacts
-
Detects ransomware indicator
-
Gandcrab Payload
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-