Overview

overview

10

Static

static

10

2024-05-24...ia.exe

windows7-x64

3

2024-05-24...ia.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

Errors

Reason
config extraction: CfgExtr crashed: 'Vidar' runtime error: index out of range [1] with length 1

General

  • Target

    2024-05-24_92cf2072a9c5c099573ad4c4fcdb54e9_avoslocker_cobalt-strike_mafia

  • Size

    558KB

  • MD5

    92cf2072a9c5c099573ad4c4fcdb54e9

  • SHA1

    54d4aa4174cbf825c025bc818dc5ec2bded3be3a

  • SHA256

    b8c745e9b8ae5610e8f68f3178c51e51db852600c454159fccecc1b3bd085c11

  • SHA512

    1cae06775fe4b00beb9aa150ffa3c2cfb785da00ca8fd6879c88a0542f8c475b9c756c51042c1129ad95048fd5aea3446a4362d7bc11cc4bccf7c71805fc2c85

  • SSDEEP

    12288:ghyTurb4C9y7vJSm1t3aJXMOlabM2jObU2SMvtqyn9rBz3mLEPFzXWxVIc68:gYTskC9y7BSm1t3aJXMOlabM2CAmvkq4

Score
10/10

Malware Config

Signatures

  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_92cf2072a9c5c099573ad4c4fcdb54e9_avoslocker_cobalt-strike_mafia
    .exe windows:5 windows x86 arch:x86

    6d52c213a6438702f4e9d11c67658522


    Headers

    Imports

    Sections