Overview

overview

10

Static

static

10

WindowsFormsApp1.exe

windows10-2004-x64

10

WindowsFormsApp1.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    RIP LMAO.zip
  • Size 1.3MB
  • Sample260129-nj8fbsas7c
  • SHA256 87e5b0bef97f9dc195693b5499a0e5f5d0ce7e3e5bf610cf7f2836904e1d9a62
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
mafiaware666discoverypersistenceransomware

Malware Config

Targets

    • Target
      WindowsFormsApp1.exe
    • Size 1.3MB
    • SHA256 9e1609ab7f01b56a9476494d9b3bf5997380d466744b07ec5d9b20e416b10f08
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    discoverymafiaware666persistenceransomware

    • Detect MafiaWare666 ransomware

    • MafiaWare666 Ransomware

      MafiaWare666 is ransomware written in C# with multiple variants.

      ransomwaremafiaware666

    • Mafiaware666 family

      mafiaware666

    • Renames multiple (77) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks