Overview

overview

10

Static

static

10

CHROME.msi

windows7-x64

10

CHROME.msi

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CHROME.MSI

  • Size

    288KB

  • Sample

    240506-ql1jlsga34

  • MD5

    10cca9ff7368ddfb2301d36fa386669a

  • SHA1

    9ec12af4a97eda16513aa51ec685601c64eec626

  • SHA256

    ba9933fa2ea29f27d73736ecd78d3f598e4786f2207e29fa6c7f42f008d529a9

  • SHA512

    c72938d43e08de87c0328a500810e0c33448110eefb3eaf9569dbb9b91e61e9db4022ca6359e84e2a9b376077d5242948ecdbd2fb433b508a4006463d56d1c85

  • SSDEEP

    3072:81L7cspAtO9mXwCGjtYNKbYO2gjpcm8rRuqpjCL42loHUvU0yGxr5GqM2a8VlhD5:btO9iRQYpgjpjew5DHyGxcqo8f7

Score
10/10
mafiaware666discoveryransomware

Malware Config

Targets

    • Target

      CHROME.MSI

    • Size

      288KB

    • MD5

      10cca9ff7368ddfb2301d36fa386669a

    • SHA1

      9ec12af4a97eda16513aa51ec685601c64eec626

    • SHA256

      ba9933fa2ea29f27d73736ecd78d3f598e4786f2207e29fa6c7f42f008d529a9

    • SHA512

      c72938d43e08de87c0328a500810e0c33448110eefb3eaf9569dbb9b91e61e9db4022ca6359e84e2a9b376077d5242948ecdbd2fb433b508a4006463d56d1c85

    • SSDEEP

      3072:81L7cspAtO9mXwCGjtYNKbYO2gjpcm8rRuqpjCL42loHUvU0yGxr5GqM2a8VlhD5:btO9iRQYpgjpjew5DHyGxcqo8f7

    Score
    10/10
    mafiaware666discoveryransomware

    • Detect MafiaWare666 ransomware

    • MafiaWare666 Ransomware

      MafiaWare666 is ransomware written in C# with multiple variants.

      ransomwaremafiaware666

    • Renames multiple (84) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Modifies file permissions

      discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks