General
-
Target
2024-04-10_6aa0b345ada18fd0db0ac2ce1722f40b_mafia
-
Size
316KB
-
Sample
240410-c7mb8afd8y
-
MD5
6aa0b345ada18fd0db0ac2ce1722f40b
-
SHA1
ef580017b0ae202813b5b22e7cd77a1c2d45f479
-
SHA256
4b14cb2ec204922f84f310e136c59866bef96b8e412efda9949e1ea5801a2234
-
SHA512
0e85dd0052de28798882c5e018248105b16760914a595342c3a919515ba35fdb3c4b9730391c0e2627dac988b34aa12573cd29dfcda8ba153beba4e4404c17b2
-
SSDEEP
6144:mvEANMO1UnseVgkV0xwvfxnhLTiusLe1740w:JuM0Unsna5mut40w
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-10_6aa0b345ada18fd0db0ac2ce1722f40b_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-10_6aa0b345ada18fd0db0ac2ce1722f40b_mafia.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-10_6aa0b345ada18fd0db0ac2ce1722f40b_mafia
-
Size
316KB
-
MD5
6aa0b345ada18fd0db0ac2ce1722f40b
-
SHA1
ef580017b0ae202813b5b22e7cd77a1c2d45f479
-
SHA256
4b14cb2ec204922f84f310e136c59866bef96b8e412efda9949e1ea5801a2234
-
SHA512
0e85dd0052de28798882c5e018248105b16760914a595342c3a919515ba35fdb3c4b9730391c0e2627dac988b34aa12573cd29dfcda8ba153beba4e4404c17b2
-
SSDEEP
6144:mvEANMO1UnseVgkV0xwvfxnhLTiusLe1740w:JuM0Unsna5mut40w
Score10/10-
GandCrab payload
-
Detects Reflective DLL injection artifacts
-
Detects ransomware indicator
-
Gandcrab Payload
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-