maui | efb858ac819d817124ae0c658ae351da8c9bce54c7b36708affa22f4676f02bb

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
15-06-2024 00:25

Target

2024-06-15_261914484ac67e6eb5d94084a559c0b0_maui.exe
Size

331KB
MD5

261914484ac67e6eb5d94084a559c0b0
SHA1

acd8ad613ec4f1094af337c59063847c75b4a19b
SHA256

efb858ac819d817124ae0c658ae351da8c9bce54c7b36708affa22f4676f02bb
SHA512

a4efd5e0f72bd01aba8761195757602520ac2e9328356e99360ea533e94ecc79f8b6b660cef157562b11d6e5d59cb464d9493b3d4de30f1280a6b5834c4cdb3f
SSDEEP

6144:dgj1SzLLw09lIbrgsYLbxkPbiXncmurMQL0CZWxEWlz+N6Zt5ZijH4t6fl6g8+Ng:dgj1EPXCP1mcBk+YZU4t/g8kS9GS

Score

10^/10

maui ransomware upx

Detect Maui ransomware 1 IoCs

resource	yara_rule
behavioral1/memory/2180-2-0x00000000001C0000-0x000000000028E000-memory.dmp	family_maui

Maui Ransomware
Ransomware-as-a-Service which first appeared in 2022.
ransomware maui

UPX dump on OEP (original entry point) 2 IoCs

resource	yara_rule
behavioral1/memory/2180-0-0x00000000001C0000-0x000000000028E000-memory.dmp	UPX
behavioral1/memory/2180-2-0x00000000001C0000-0x000000000028E000-memory.dmp	UPX

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2180-0-0x00000000001C0000-0x000000000028E000-memory.dmp	upx
behavioral1/memory/2180-2-0x00000000001C0000-0x000000000028E000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2024-06-15_261914484ac67e6eb5d94084a559c0b0_maui.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-15_261914484ac67e6eb5d94084a559c0b0_maui.exe"
1⤵
PID:2180

memory/2180-0-0x00000000001C0000-0x000000000028E000-memory.dmp

Filesize
824KB

Download
memory/2180-2-0x00000000001C0000-0x000000000028E000-memory.dmp

Filesize
824KB

Download