General

  • Target

    2024-05-24_8907a36ae9c4d2c56660465fc21b333f_mafia

  • Size

    348KB

  • MD5

    8907a36ae9c4d2c56660465fc21b333f

  • SHA1

    77ce9feb64af04e4d0a3d129d797d1f9f5949ad5

  • SHA256

    56340b2d8509f6287c5b4ce1b9445254af2f9ede7edd60192194b7d0a39a35c5

  • SHA512

    2c2465399d27da287d9abe10f54d8ca579c1b72c0b8f01e5819bc9a254779b0855a122bd448ec139b50c82a7c90180dcf881d751c8eab6fd0d5c01508466b6f9

  • SSDEEP

    6144:de/h0TMPIRSVfGXb195t8v9+uSA9fn1ybNJUFaGI6hV2Ai/p:k/hNgMx4t88vkf1CNJUFFIS

Score
10/10

Malware Config

Signatures

  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_8907a36ae9c4d2c56660465fc21b333f_mafia
    .exe windows:5 windows x86 arch:x86

    338c07e332d695514cf2dbde72dd7cc7


    Headers

    Imports

    Sections