maui | 2024-06-12_ebf7e7d2f9d2bbad9b778e9bf55bc237_maui_revil | Triage

Sharing

General

Target

2024-06-12_ebf7e7d2f9d2bbad9b778e9bf55bc237_maui_revil
Size

763KB
MD5

ebf7e7d2f9d2bbad9b778e9bf55bc237
SHA1

aa9efe5bf04d7526b9c1eabbeab63efbeaa8ec6e
SHA256

35b752b578d44db1412a3766f9448193a01e22eb58a7676ed17df0e6b2caef36
SHA512

0b7c3592afa4716ac4980eb7167a48c903160a6f92c8eb70381874146d1166748ca6ffa6a59f2400a336e54b90729390fb947c7fd21c13ed5ddf98f13c4d522c
SSDEEP

12288:h+2NRE6xDWPOO3Kt7RJatTrAtfpYqCX9b:hhRxWPOO3Kt7FfpYhXJ

Score

10^/10

maui

Malware Config

Signatures

Detect Maui ransomware 1 IoCs

resource	yara_rule
sample	family_maui

Maui family
maui

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-12_ebf7e7d2f9d2bbad9b778e9bf55bc237_maui_revil

Files

2024-06-12_ebf7e7d2f9d2bbad9b778e9bf55bc237_maui_revil
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 497KB - Virtual size: 497KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ