General

  • Target

    2024-05-14_498b3767a20baadb6b77b88a89bcedd4_mafia_revil

  • Size

    12.5MB

  • MD5

    498b3767a20baadb6b77b88a89bcedd4

  • SHA1

    f273b53864ae67777d2ec89052bdb3830ff57853

  • SHA256

    ca43f1fdb436c960bab4f908868efe0a3ac6a3705e72dd5e049087f6ad2befd1

  • SHA512

    46601cfd8cfa29d9c123803d318ae5c94967752b0eddc6be6b8d10f224525704ea366a3f863efa2d8b0aa84012e462570175befada42ae573fe4a80a940e20e3

  • SSDEEP

    196608:5kPT39lBM7FUzFL0rZfCtUHYO/R8Zgv8JGwqWOa4dgsIe:5qZF0r0CHYO/Rrwq/a4Ks

Score
10/10

Malware Config

Signatures

  • Detects executables calling ClearMyTracksByProcess 1 IoCs
  • Detects executables embedding registry key / value combination manipulating RDP / Terminal Services 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-14_498b3767a20baadb6b77b88a89bcedd4_mafia_revil
    .exe windows:5 windows x86 arch:x86

    5b2ced30a53d93d3faa10638ca94561b


    Headers

    Imports

    Sections