General
-
Target
2024-07-09_b0bf9d6d2fa963e5194ba166410fb289_mafia
-
Size
1.0MB
-
Sample
240709-f51nlsyakr
-
MD5
b0bf9d6d2fa963e5194ba166410fb289
-
SHA1
b4a810c4673ea2feba8c96aa8dd4abba1d0c5709
-
SHA256
a86ba647952c636a6afe4c834798998a928266e3833ded8de77109ecc80ec11e
-
SHA512
3493dff6c4d6843dba2b4caa6cb50d0fe67474d742000c8bf7fbfd9dd0ffd0725463abddb2f301d503f77dea376e32bcff2a12395b686e3122a6328d815b7c26
-
SSDEEP
24576:VaXNJQVJvxC3ZvobLzB/3gQvExFpdhC55AKDqsc53vTyDFVTTMwH:3JvCZA7B/gkUrMvLqscVyDFV/j
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-09_b0bf9d6d2fa963e5194ba166410fb289_mafia.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-07-09_b0bf9d6d2fa963e5194ba166410fb289_mafia.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
2024-07-09_b0bf9d6d2fa963e5194ba166410fb289_mafia
-
Size
1.0MB
-
MD5
b0bf9d6d2fa963e5194ba166410fb289
-
SHA1
b4a810c4673ea2feba8c96aa8dd4abba1d0c5709
-
SHA256
a86ba647952c636a6afe4c834798998a928266e3833ded8de77109ecc80ec11e
-
SHA512
3493dff6c4d6843dba2b4caa6cb50d0fe67474d742000c8bf7fbfd9dd0ffd0725463abddb2f301d503f77dea376e32bcff2a12395b686e3122a6328d815b7c26
-
SSDEEP
24576:VaXNJQVJvxC3ZvobLzB/3gQvExFpdhC55AKDqsc53vTyDFVTTMwH:3JvCZA7B/gkUrMvLqscVyDFV/j
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Loads dropped DLL
-