General
-
Target
2024-04-01_4a78eedcc75dd72b4db2fa6b6b250def_mafia
-
Size
351KB
-
Sample
240401-b3xrqaad52
-
MD5
4a78eedcc75dd72b4db2fa6b6b250def
-
SHA1
56bd4979f8c26be4ed6446e1bfcde5feec267a54
-
SHA256
f82c50346ddc75be579e51800a47b082959c00f8e690344f9b27bb1fae1bb4e9
-
SHA512
86a63d46054c52f34a39500f2f3f8dad7628bd08b6584677eacba9393fbd221577c8586f5024638381ce7e6cc0c9b7946ccc691bd2ffc7260d3e368e956a9284
-
SSDEEP
3072:QpNMs+Kr1wbWGjl0xjsNNeVKBNVBxKT46xl+wndfIQQOaC3QBn7/hsb2BhGZ1/Nb:QpNMsLWEjsXjBATRpuuwnGD/Nj6a
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-01_4a78eedcc75dd72b4db2fa6b6b250def_mafia.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-04-01_4a78eedcc75dd72b4db2fa6b6b250def_mafia.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-01_4a78eedcc75dd72b4db2fa6b6b250def_mafia
-
Size
351KB
-
MD5
4a78eedcc75dd72b4db2fa6b6b250def
-
SHA1
56bd4979f8c26be4ed6446e1bfcde5feec267a54
-
SHA256
f82c50346ddc75be579e51800a47b082959c00f8e690344f9b27bb1fae1bb4e9
-
SHA512
86a63d46054c52f34a39500f2f3f8dad7628bd08b6584677eacba9393fbd221577c8586f5024638381ce7e6cc0c9b7946ccc691bd2ffc7260d3e368e956a9284
-
SSDEEP
3072:QpNMs+Kr1wbWGjl0xjsNNeVKBNVBxKT46xl+wndfIQQOaC3QBn7/hsb2BhGZ1/Nb:QpNMsLWEjsXjBATRpuuwnGD/Nj6a
Score10/10-
GandCrab payload
-
Detects Reflective DLL injection artifacts
-
Detects ransomware indicator
-
Gandcrab Payload
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-