General

  • Target

    Skull.zip

  • Size

    1.3MB

  • Sample

    250205-g6kjfsvrdk

  • MD5

    becfdfe3b64ba3a759aeb2c40280d7fc

  • SHA1

    b15d49d221a8b63ae2ed207c0d8b44a1be2be686

  • SHA256

    a9573f790d011f3bc8765eb14d0edf0ab1951eb651ae27546b60030feaee4071

  • SHA512

    9cb48339d9adcda0720030c5186b645d5891613dad9558fcd8f380c4efa209e515b8ebb7494757a88286233464023ae7a592bca43c593f89bb0d7b13eaad860c

  • SSDEEP

    24576:lw2DLlFLPzsT/IBDeEFsGJiTZwDDd3W3JcZ4zH:lw2D3PzsLWPJiTZV5cmzH

Malware Config

Targets

    • Target

      Skull.exe

    • Size

      1.3MB

    • MD5

      041584323e0b3786aff522d996726c09

    • SHA1

      834d3f3a44b89f13fab27816da398f74d887b20a

    • SHA256

      e522283c9dd79e1121fc3f22772cd59996cd13584c798d6517b9a3e37c727076

    • SHA512

      2817c5c579cad45c2337955bb2cb825715ac1cfd82bd5c4998fd93bd8f0011f4c750285335cf9e914a370011943f87d1c2795eea2d84b6ff1da0146072743c50

    • SSDEEP

      24576:NTSTiRsBE12BIVpT2QhYpAILUo/g9QZqpMC3QVbIoTdWR8SfEuGujqZF13z8H81:NT7RseZDT2tSbvQsIbe8YVjPH81

    • Detect MafiaWare666 ransomware

    • MafiaWare666 Ransomware

      MafiaWare666 is ransomware written in C# with multiple variants.

    • Mafiaware666 family

    • Renames multiple (108) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks