General

  • Target

    2024-04-22_fcd605d5df74b9c279d088cf55eae6f9_floxif_mafia

  • Size

    19.5MB

  • MD5

    fcd605d5df74b9c279d088cf55eae6f9

  • SHA1

    5f5f01af76a26fd57b4f4c84262b935958546f64

  • SHA256

    4eb3d99c153f287c5c40aaad78b54215e749f59c8904c3017d21e890121be07c

  • SHA512

    9401c34fedaea3d748fb989abc4a781bf24459d5d76bbccef8dbcabfc82a269943cc6a63406260bf9f2d53a0989c4b12e7eb8371d9fd9777029f921913f59f26

  • SSDEEP

    393216:XfTjcLMIzX1Nv718NNGj7JfVfT/piEPBACEfTjcL3HzX1Nv718NNGj7JfVfT/piR:LjcLDmNIj9W8BANjcLvmNIj9WR

Score
10/10

Malware Config

Signatures

  • Detects executables packed with Enigma 1 IoCs
  • Detects packed executables observed in Molerats 1 IoCs
  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-22_fcd605d5df74b9c279d088cf55eae6f9_floxif_mafia
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections