General

  • Target

    2024-06-04_c9f3394b842c5eb2d28774f4ef1d3998_mafia

  • Size

    1.7MB

  • Sample

    240604-pn6yqsga4x

  • MD5

    c9f3394b842c5eb2d28774f4ef1d3998

  • SHA1

    0761529254ef1f20892ca6f4a7576906fa37055c

  • SHA256

    ac94e16a789a3d82cacb85f06c344f6caf6c6cc41f345898a059640f417c0754

  • SHA512

    22db6a74791ea91dbb2cc22a45852e2b664618dd256ce539e4fd696e52820a60399e55df410a88329715fc270a7ce821fe180efe0b05352076305e472fad5632

  • SSDEEP

    24576:ppmjBbyrHRxwDTCTGuPZdZCSmwdxY2MaugVXyDANT4KoRFoRfMdM+i5SVp7M:pEMxw3CTXZCRyxpXesdGRVhM

Malware Config

Targets

    • Target

      2024-06-04_c9f3394b842c5eb2d28774f4ef1d3998_mafia

    • Size

      1.7MB

    • MD5

      c9f3394b842c5eb2d28774f4ef1d3998

    • SHA1

      0761529254ef1f20892ca6f4a7576906fa37055c

    • SHA256

      ac94e16a789a3d82cacb85f06c344f6caf6c6cc41f345898a059640f417c0754

    • SHA512

      22db6a74791ea91dbb2cc22a45852e2b664618dd256ce539e4fd696e52820a60399e55df410a88329715fc270a7ce821fe180efe0b05352076305e472fad5632

    • SSDEEP

      24576:ppmjBbyrHRxwDTCTGuPZdZCSmwdxY2MaugVXyDANT4KoRFoRfMdM+i5SVp7M:pEMxw3CTXZCRyxpXesdGRVhM

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks