General

  • Target

    2024-05-05_7a67301de9524e75b2fc457a35706664_mafia

  • Size

    661KB

  • Sample

    240505-x6ntwaed83

  • MD5

    7a67301de9524e75b2fc457a35706664

  • SHA1

    b3d98078750a7f3184a02ca92528440835d5626d

  • SHA256

    a9687c794d156a677896ac8f5fce43c6977650954142887aaeaac9104425d92b

  • SHA512

    bfdca462be2be8e8e5e019e60e1fbf59046e5f58d4d579ad40bbc381a2a27b6c23e517d4e748a533d5d02ae6081a5b5cf3b9e0d8afa1856e4cded0a958b2161b

  • SSDEEP

    12288:Pqw/HtjZN+aD3TNW1IqGs48963Qu2g9PbAJimOJije/:PbFjZN73hYIqG9896379zA6JijC

Score
10/10

Malware Config

Targets

    • Target

      2024-05-05_7a67301de9524e75b2fc457a35706664_mafia

    • Size

      661KB

    • MD5

      7a67301de9524e75b2fc457a35706664

    • SHA1

      b3d98078750a7f3184a02ca92528440835d5626d

    • SHA256

      a9687c794d156a677896ac8f5fce43c6977650954142887aaeaac9104425d92b

    • SHA512

      bfdca462be2be8e8e5e019e60e1fbf59046e5f58d4d579ad40bbc381a2a27b6c23e517d4e748a533d5d02ae6081a5b5cf3b9e0d8afa1856e4cded0a958b2161b

    • SSDEEP

      12288:Pqw/HtjZN+aD3TNW1IqGs48963Qu2g9PbAJimOJije/:PbFjZN73hYIqG9896379zA6JijC

    Score
    10/10
    • Expiro, m0yv

      Expiro aka m0yv is a multi-functional backdoor written in C++.

    • Expiro payload

MITRE ATT&CK Matrix

Tasks