Overview

overview

10

Static

static

1

ransomware.rar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ransomware.rar

  • Size

    1.3MB

  • Sample

    240918-eb5vss1dpd

  • MD5

    772a5166cba8d08dd969ba5594038522

  • SHA1

    0e6cfffeacfe6d684e5263bd0c2e91e7d83bb116

  • SHA256

    613bfc0cb68ebda81470975ec0c9ee04f93e86f7981ef52cf7adaa9c07bfc1ba

  • SHA512

    3675f882425934e69cc7a22c9d29465ded5006f73a38675b86c569bcf09e4e4f2d48e9b856bf675c7d7eedd8a9d7191fd8f29a7606448880810b8aa2904f8123

  • SSDEEP

    24576:3vuG8CYh3RHD58zSmHeGG7EjzbrAXkf3/KJeqvkgVCSuTp2VsdzspJFe:/eCaj5iHeG0Ynf3EsWCzTs2zspre

Score
10/10
mafiaware666defense_evasiondiscoveryransomware

Malware Config

Targets

    • Target

      ransomware.rar

    • Size

      1.3MB

    • MD5

      772a5166cba8d08dd969ba5594038522

    • SHA1

      0e6cfffeacfe6d684e5263bd0c2e91e7d83bb116

    • SHA256

      613bfc0cb68ebda81470975ec0c9ee04f93e86f7981ef52cf7adaa9c07bfc1ba

    • SHA512

      3675f882425934e69cc7a22c9d29465ded5006f73a38675b86c569bcf09e4e4f2d48e9b856bf675c7d7eedd8a9d7191fd8f29a7606448880810b8aa2904f8123

    • SSDEEP

      24576:3vuG8CYh3RHD58zSmHeGG7EjzbrAXkf3/KJeqvkgVCSuTp2VsdzspJFe:/eCaj5iHeG0Ynf3EsWCzTs2zspre

    Score
    10/10
    mafiaware666defense_evasiondiscoveryransomware

    • Detect MafiaWare666 ransomware

    • MafiaWare666 Ransomware

      MafiaWare666 is ransomware written in C# with multiple variants.

      ransomwaremafiaware666

    • Renames multiple (124) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks