maui | 2024-06-14_3cc70437e666c4dd85e37208090a151f_maui_revil | Triage

Sharing

General

Target

2024-06-14_3cc70437e666c4dd85e37208090a151f_maui_revil
Size

763KB
MD5

3cc70437e666c4dd85e37208090a151f
SHA1

b4b60e236ee78fd15f1d6e325814bb18086c4d85
SHA256

d6845785b1b2b865157f657611c9aa6b5f7e49a7eafbfa91cc56271332af8a46
SHA512

3f4d781a0048e01922941888b3a12313911fa04bbfa0fbdfc815157152dccfeba3d3efb212607b437230d98e7a0a1c6b132091016ae23a5ba5d2aaf84c2d91be
SSDEEP

12288:h+2NRE6xDWPOO3Kt7RJatTrAtfpYqCX9M:hhRxWPOO3Kt7FfpYhX+

Score

10^/10

maui

Malware Config

Signatures

Detect Maui ransomware 1 IoCs

resource	yara_rule
sample	family_maui

Maui family
maui

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-14_3cc70437e666c4dd85e37208090a151f_maui_revil

Files

2024-06-14_3cc70437e666c4dd85e37208090a151f_maui_revil
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 497KB - Virtual size: 497KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ