General

  • Target

    2024-05-26_e2000de255005dce79b5729293fd72d0_mafia

  • Size

    3.4MB

  • Sample

    240526-cap2vaaf4z

  • MD5

    e2000de255005dce79b5729293fd72d0

  • SHA1

    045a6db0b17daae94ed52b0160a81e23cd94ee5c

  • SHA256

    307e24c4a9391c94833b1c764e7ab3ab2ea4fab12eed491d59b64c4e48935298

  • SHA512

    ff7ca9a07a4824e457622e563d725306cdb314affb050f267931564b1c06d0125629e53b1d0ec53cd6f7121534968f350157b99ed9acff97ef1591c6a807c075

  • SSDEEP

    49152:5K8JmFCI7JwSlqnKaeEHrqnund3cLOk785ri7OsTEZMrI+DO8lJPEp7xdXU2b:5L0C4lqrHX9cLj2rsJTlEGJDPETFN

Score
9/10

Malware Config

Targets

    • Target

      2024-05-26_e2000de255005dce79b5729293fd72d0_mafia

    • Size

      3.4MB

    • MD5

      e2000de255005dce79b5729293fd72d0

    • SHA1

      045a6db0b17daae94ed52b0160a81e23cd94ee5c

    • SHA256

      307e24c4a9391c94833b1c764e7ab3ab2ea4fab12eed491d59b64c4e48935298

    • SHA512

      ff7ca9a07a4824e457622e563d725306cdb314affb050f267931564b1c06d0125629e53b1d0ec53cd6f7121534968f350157b99ed9acff97ef1591c6a807c075

    • SSDEEP

      49152:5K8JmFCI7JwSlqnKaeEHrqnund3cLOk785ri7OsTEZMrI+DO8lJPEp7xdXU2b:5L0C4lqrHX9cLj2rsJTlEGJDPETFN

    Score
    9/10
    • Detects encrypted or obfuscated .NET executables

    • Detects executables packed with Dotfuscator

    • Detects executables packed with Goliath

    • Detects executables packed with SmartAssembly

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

MITRE ATT&CK Matrix ATT&CK v13

Tasks