General
- Target WindowsFormsApp1.exe
- Size 1.3MB
- Sample251208-ltn4bswjem
- SHA256 5e2d82b9a8a19e5ab65d75ca8c29782b2fd1f02d3de4bfbf2c2931eb8e9b172d
- MD5 bfcf0e975aa366b9360c74169eedbb7e
- SHA1 7b426f5432bd01b1e307456eafe06ddd6455603a
- SHA512 1bce576fe39a3d54156f335f6cf550b73df3b1cca311daed0148db6846aba1d6b04c87644ad3a062cfe0d690c8d801b66bcdf0d3b468e6374cf40c5ab19d9f2d
- SSDEEP 24576:gTSTiRsBE12BIVpT2QhYpAILUo/g9QZqpMC3QVbIoTdWR8SfEuGujqZF13z8H81:gT7RseZDT2tSbvQsIbe8YVjPH81
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
WindowsFormsApp1.exe
Resource
win10v2004-20251016-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
WindowsFormsApp1.exe
Resource
win11-20251015-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target WindowsFormsApp1.exe
- Size 1.3MB
- SHA256 5e2d82b9a8a19e5ab65d75ca8c29782b2fd1f02d3de4bfbf2c2931eb8e9b172d
- MD5 bfcf0e975aa366b9360c74169eedbb7e
- SHA1 7b426f5432bd01b1e307456eafe06ddd6455603a
- SHA512 1bce576fe39a3d54156f335f6cf550b73df3b1cca311daed0148db6846aba1d6b04c87644ad3a062cfe0d690c8d801b66bcdf0d3b468e6374cf40c5ab19d9f2d
- SSDEEP 24576:gTSTiRsBE12BIVpT2QhYpAILUo/g9QZqpMC3QVbIoTdWR8SfEuGujqZF13z8H81:gT7RseZDT2tSbvQsIbe8YVjPH81
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detect MafiaWare666 ransomware
-
MafiaWare666 Ransomware
MafiaWare666 is ransomware written in C# with multiple variants.
-
Mafiaware666 family
-
Renames multiple (118) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops desktop.ini file(s)