_AbortPrint@0
_ClosePrint@0
_ContinuePrint@0
_EndPrint@0
_EndRipData@0
_ExitPrinter@0
_GetIPList@8
_InitPrinter@4
_InitPrinterMul@4
_PausePrint@0
_PrintALine@8
_StartPrint@8
_WriteRipData@8
General
-
Target
2024-07-01_c88e98f8c5bc22bcbb3b1ef4da1bad11_mafia_ramnit
-
Size
19.5MB
-
MD5
c88e98f8c5bc22bcbb3b1ef4da1bad11
-
SHA1
4c6aa13146a41b6cbed65ff23dbd326e8395dfb3
-
SHA256
6555419a58e1b7a84cbb0cfc47ecb29367a1547ad9c81ca1949f8bd1e0872ebd
-
SHA512
ed77e13f97ab0a094a35b2ffc8d24677c40fbe5cb6adb6a05356be23eec174f6bbc51a8a9dc07e0800b503a6cbe23e63aed49c82bc40e716bb2fed088c9df24f
-
SSDEEP
393216:YDbvRS3X1Nv718NNGj7JfVfT/piEODbvRS3X1Nv718NNGj7JfVfT/piEeBAC+:YDbvR+mNIj9WdDbvR+mNIj9W3BA
Score
10/10
Malware Config
Signatures
-
Detects executables packed with Enigma 1 IoCs
-
Detects packed executables observed in Molerats 1 IoCs
-
CryptOne packer 1 IoCs
Detects CryptOne packer defined in NCC blogpost.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-07-01_c88e98f8c5bc22bcbb3b1ef4da1bad11_mafia_ramnit
Headers
Exports
Sections