General
-
Target
2024-06-16_5a20c0a6001736583e32b05ed6cb601a_mafia
-
Size
1015KB
-
Sample
240616-lq1yqaydph
-
MD5
5a20c0a6001736583e32b05ed6cb601a
-
SHA1
2542f9c9e0f4980dba5f2b8c21f41eb88be91b24
-
SHA256
f73e6dc616b4a2ea71bf8c80506995ef5aae97515456791e60dc77e648d765c7
-
SHA512
814dc37a93c1e14497b2e515ede31f3e3439550db0a48bb75cd9054928f9fd78d047532a5053b9509949c8a317ca0fc93e97a56410da4cf49929e8e154130694
-
SSDEEP
24576:jaXNJQVJvxC3ZtobLzB/3gQvExFpdhC55AKDqsc53vTkO/YF:hJvCZa7B/gkUrMvLqscVF/U
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-16_5a20c0a6001736583e32b05ed6cb601a_mafia.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-16_5a20c0a6001736583e32b05ed6cb601a_mafia.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-16_5a20c0a6001736583e32b05ed6cb601a_mafia
-
Size
1015KB
-
MD5
5a20c0a6001736583e32b05ed6cb601a
-
SHA1
2542f9c9e0f4980dba5f2b8c21f41eb88be91b24
-
SHA256
f73e6dc616b4a2ea71bf8c80506995ef5aae97515456791e60dc77e648d765c7
-
SHA512
814dc37a93c1e14497b2e515ede31f3e3439550db0a48bb75cd9054928f9fd78d047532a5053b9509949c8a317ca0fc93e97a56410da4cf49929e8e154130694
-
SSDEEP
24576:jaXNJQVJvxC3ZtobLzB/3gQvExFpdhC55AKDqsc53vTkO/YF:hJvCZa7B/gkUrMvLqscVF/U
Score9/10-
UPX dump on OEP (original entry point)
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Loads dropped DLL
-