General
- Target WindowsFormsApp1.exe.zip
- Size 308KB
- Sample250415-evz4naxqs3
- SHA256 8c873c4f474248e0a5b98334112d53bfa073a7ac8d2f01dc9fe670cfe8adc753
- MD5 67cecab6429044833efa6dcc26cc1576
- SHA1 156872dc4ec09c9a4c50ea6bf222881678ceed79
- SHA512 9e2e4ca138c6f1cc6ed9c8db4da79e113f863c3c13e3d66a7c3b856759589b6d9ea386c7af1f02900d9b2b6412bd22e2d644e584aeac13880b76d503209b40f2
- SSDEEP 6144:EpnSYoiTWeqh//i/l0MlMQSPRQRBIwdXBpDRxOkDgtBAJpldpQmvB:EaiTUh//6K5QnFXRxddpQ8
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
WindowsFormsApp1.exe
Resource
win10v2004-20250410-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target WindowsFormsApp1.exe.bin
- Size 319KB
- SHA256 a95ca3200ebad491743840f3f5cadcbde60c9305119109c963c9d9d00b0754df
- MD5 cd97bd6cf56cb91f3a59d232bf4a16e6
- SHA1 7294e5f4657e26bd02ad66569dd06fbee1e63ff4
- SHA512 9a984317e024fb285993bb895d131dee915ce50c510a2da833b7aa9e0b08781ab1e73e6d736004f58ffa9bdf06ef230039fc2669dd95171b4b3e74527327758b
- SSDEEP 6144:oY/RjpLEjKQJeDc7rTraDFOYRZ4aKPCwpTHt7z18rwa5H52QSSUl1ym:ZNxEjK4VPHu/3KqwhtHusFSUl1
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect MafiaWare666 ransomware
-
MafiaWare666 Ransomware
MafiaWare666 is ransomware written in C# with multiple variants.
-
Mafiaware666 family
-
Renames multiple (93) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops desktop.ini file(s)