General

  • Target

    2024-05-20_54643e7bcd27e7a057cbcedc90b5605d_floxif_mafia

  • Size

    1.8MB

  • MD5

    54643e7bcd27e7a057cbcedc90b5605d

  • SHA1

    3689453bd29b4852ac94a4dd99d99b454f99ca54

  • SHA256

    7b5599da606874824d7a910899010c6ed1c4da43074dc7ed7de1c188dcb6b367

  • SHA512

    d8b888eb31e90ec3f33a362c07a390ade3713a6a994dcc016a135070fe9fe601998a284fa42e9ff1cea2516b02a69446a571b350a7aabf1efac42ccda1605528

  • SSDEEP

    49152:opECgw15kZV2HXsMnmjEREseBSsxHnfXsrHYihYiViV:85YuY5

Score
10/10

Malware Config

Signatures

  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-20_54643e7bcd27e7a057cbcedc90b5605d_floxif_mafia
    .exe windows:5 windows x86 arch:x86

    136bea86936e01e1f983ef31dafa8b2a


    Headers

    Imports

    Sections