diff --git a/MafiaWare666/README.md b/MafiaWare666/README.md
new file mode 100644
index 0000000..ac7d60e
--- /dev/null
+++ b/MafiaWare666/README.md
@@ -0,0 +1,30 @@
+# IoC for MafiaWare666 ransomware
+
+Malware analysis and more technical information at <https://decoded.avast.io/threatresearch/decrypted-mafiaware666-ransomware/>
+
+Download the free decryptor [here](https://files.avast.com/files/decryptor/avast_decryptor_mafiaware666.exe).
+
+## Samples (SHA-256)
+#### .MafiaWare666
+```
+6e91c9b5d052842093c6c292ec8224755d376aba6172d94faa241d8b192cb265
+73d8e7baa073997d060ecf826b533263cf857a89b36a5fea809b7dbfc70b2d25
+8324172e89866ed7122a9518bdc07e07ec2d173462dbbe2ff030fb408bc18123
+```
+#### .jcrypt
+```
+89ebe17b6dbb9dac780a4e2fe38da0261fa671cc79f4fe07cb9d26d9c0e447d2
+979962e2d9f64ee15854e6df908627c90ab85a0a346c11656df46d3130459dc9
+```
+#### .brutusptCrypt
+```
+8c1a97f84caa9d58940d936a1c79c1c8d5fb791e1b3cac9fda22d195d3aeaea9
+```
+#### .bmcrypt
+```
+5d4ba2e6cc18dc509e73f3ceeea82a83ca252d07444a6b669947d31f60c6dfb8
+```
+#### .cyberone
+```
+ee376851cb318f77b9c8b715a09c5c0ce11043f679bb39fa5b5d67242c1c3bb9
+```
\ No newline at end of file