General
-
Target
2024-04-18_53b164ea54e75f080cfc51c12e7a2dd1_mafia
-
Size
565KB
-
Sample
240418-2bfx1ahe5x
-
MD5
53b164ea54e75f080cfc51c12e7a2dd1
-
SHA1
8e6bb4eb7bd64a1934875a678942af261a3f5f15
-
SHA256
670714e997a8476ef4b40e1b3db6c90ac116f9e16a2fdaba87566687dd1d1db9
-
SHA512
120021993c565ea8bb91d105edee2814e4a71667b60518bad34df509ec6311f4dcd5f49ff84d4dfa84d6e9a394ce17a3806566696e160c9ec0cc9752186a9c85
-
SSDEEP
12288:LhRwthO92XnxugayR/pH3xefN6ysjxKp:LhRwt6ynxoyR5BLtG
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-18_53b164ea54e75f080cfc51c12e7a2dd1_mafia.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-04-18_53b164ea54e75f080cfc51c12e7a2dd1_mafia.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-18_53b164ea54e75f080cfc51c12e7a2dd1_mafia
-
Size
565KB
-
MD5
53b164ea54e75f080cfc51c12e7a2dd1
-
SHA1
8e6bb4eb7bd64a1934875a678942af261a3f5f15
-
SHA256
670714e997a8476ef4b40e1b3db6c90ac116f9e16a2fdaba87566687dd1d1db9
-
SHA512
120021993c565ea8bb91d105edee2814e4a71667b60518bad34df509ec6311f4dcd5f49ff84d4dfa84d6e9a394ce17a3806566696e160c9ec0cc9752186a9c85
-
SSDEEP
12288:LhRwthO92XnxugayR/pH3xefN6ysjxKp:LhRwt6ynxoyR5BLtG
Score7/10-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-