General
- Target WindowsFormsApp1.exe
- Size 1.3MB
- Sample251208-l9dmjavmcw
- SHA256 bec2898327ecb9d6ea09abe2c3fe90ec1bdd1c5795041719848dd54b7f10591a
- MD5 5dfc0214313e080ca5be34cc61dbfb64
- SHA1 8de5b77a3f51524cebd41a94a29f4cb0295159ae
- SHA512 564b3d19970a376247fa417892a816c4b5eedc5d355edf5e844d653db649470454baa57b5a90e0575e153395a71daf4ee3bf0e84e36aa082834d34b49a436dfe
- SSDEEP 24576:tTSTiRsBE12BIVpT2QhYpAILUo/g9QZqpMC3QVbIoTdWR8SfEuGujqZF13z8H81:tT7RseZDT2tSbvQsIbe8YVjPH81
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
WindowsFormsApp1.exe
Resource
win10v2004-20251016-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
WindowsFormsApp1.exe
Resource
win11-20251015-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target WindowsFormsApp1.exe
- Size 1.3MB
- SHA256 bec2898327ecb9d6ea09abe2c3fe90ec1bdd1c5795041719848dd54b7f10591a
- MD5 5dfc0214313e080ca5be34cc61dbfb64
- SHA1 8de5b77a3f51524cebd41a94a29f4cb0295159ae
- SHA512 564b3d19970a376247fa417892a816c4b5eedc5d355edf5e844d653db649470454baa57b5a90e0575e153395a71daf4ee3bf0e84e36aa082834d34b49a436dfe
- SSDEEP 24576:tTSTiRsBE12BIVpT2QhYpAILUo/g9QZqpMC3QVbIoTdWR8SfEuGujqZF13z8H81:tT7RseZDT2tSbvQsIbe8YVjPH81
- MD5 SHA1 SHA512 SSDEEP
Score10/10Detect MafiaWare666 ransomware
MafiaWare666 Ransomware
MafiaWare666 is ransomware written in C# with multiple variants.
Mafiaware666 family
Renames multiple (396) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
Drops desktop.ini file(s)