General

  • Target

    2024-04-22_d200cd10522496900e9c33283157c1f9_floxif_mafia

  • Size

    19.5MB

  • MD5

    d200cd10522496900e9c33283157c1f9

  • SHA1

    36b6b3c56c90999eebc5555ca52282c3b8fd9415

  • SHA256

    d53de10f91c33b124077ff27f6b48f656e2942b45915e5c32ee3f7442290794e

  • SHA512

    d63317200f74db4f8add8b0d3d6ed7dcfc09c5f1df6918a3a321d3bc483e35031a087ec1a16c2d0b95e1ec2d0f9bf27e31867b0a4a977a94299dbe120e8b89f0

  • SSDEEP

    393216:XfDjcL3ozX1Nv718NNGj7JfVfT/piEPBACEfTjcL3HzX1Nv718NNGj7JfVfT/piu:bjcL0mNIj9W8BANjcLvmNIj9Wu

Score
10/10

Malware Config

Signatures

  • Detects executables packed with Enigma 1 IoCs
  • Detects packed executables observed in Molerats 1 IoCs
  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-22_d200cd10522496900e9c33283157c1f9_floxif_mafia
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections