Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
15-06-2024 00:25
Behavioral task
behavioral1
Sample
2024-06-15_261914484ac67e6eb5d94084a559c0b0_maui.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-15_261914484ac67e6eb5d94084a559c0b0_maui.exe
Resource
win10v2004-20240611-en
General
-
Target
2024-06-15_261914484ac67e6eb5d94084a559c0b0_maui.exe
-
Size
331KB
-
MD5
261914484ac67e6eb5d94084a559c0b0
-
SHA1
acd8ad613ec4f1094af337c59063847c75b4a19b
-
SHA256
efb858ac819d817124ae0c658ae351da8c9bce54c7b36708affa22f4676f02bb
-
SHA512
a4efd5e0f72bd01aba8761195757602520ac2e9328356e99360ea533e94ecc79f8b6b660cef157562b11d6e5d59cb464d9493b3d4de30f1280a6b5834c4cdb3f
-
SSDEEP
6144:dgj1SzLLw09lIbrgsYLbxkPbiXncmurMQL0CZWxEWlz+N6Zt5ZijH4t6fl6g8+Ng:dgj1EPXCP1mcBk+YZU4t/g8kS9GS
Malware Config
Signatures
-
Detect Maui ransomware 1 IoCs
resource yara_rule behavioral2/memory/1988-2-0x0000000000C60000-0x0000000000D2E000-memory.dmp family_maui -
Maui Ransomware
Ransomware-as-a-Service which first appeared in 2022.
-
UPX dump on OEP (original entry point) 2 IoCs
resource yara_rule behavioral2/memory/1988-0-0x0000000000C60000-0x0000000000D2E000-memory.dmp UPX behavioral2/memory/1988-2-0x0000000000C60000-0x0000000000D2E000-memory.dmp UPX -
resource yara_rule behavioral2/memory/1988-0-0x0000000000C60000-0x0000000000D2E000-memory.dmp upx behavioral2/memory/1988-2-0x0000000000C60000-0x0000000000D2E000-memory.dmp upx