General

  • Target

    2024-04-23_1d3555d7f45f8bcdd26e9dc02378d025_floxif_mafia

  • Size

    19.5MB

  • MD5

    1d3555d7f45f8bcdd26e9dc02378d025

  • SHA1

    a78e7fce6101a5cb29d52424b1726cb0727c45ab

  • SHA256

    61b55d8554e45ddd8e67355080a5f22dc5c4094dec7a43e09bc1fbeb5584dc08

  • SHA512

    5863d381babdd884b94d229277f3793b70db6434b4fdccd509050016e8432031ea6b206ac46c46a536266d2b60afa62cda95ed137f9a861794be803f0ce39871

  • SSDEEP

    393216:XfTNcL3SzX1Nv718NNGj7JfVfT/piEPBACEfTjcL3HzX1Nv718NNGj7JfVfT/pi0:LNcLumNIj9W8BANjcLvmNIj9W0

Score
10/10

Malware Config

Signatures

  • Detects executables packed with Enigma 1 IoCs
  • Detects packed executables observed in Molerats 1 IoCs
  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-23_1d3555d7f45f8bcdd26e9dc02378d025_floxif_mafia
    .exe windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections