Overview

overview

7

Static

static

3

45bf6a0ad6...JC.exe

windows7-x64

7

45bf6a0ad6...JC.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    02/08/2023, 19:25

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    45bf6a0ad65d06cebf83d44bb2784253_mafia_JC.exe

  • Size

    412KB

  • MD5

    45bf6a0ad65d06cebf83d44bb2784253

  • SHA1

    16b328cc1c838540e4c600d21c23195acf3e14bc

  • SHA256

    46e01dbedadb91957cfde19e4849642726c4dd59e65a3c2e7272da8146780511

  • SHA512

    0363c8319c64b7ceed60590455a3833f794eb45da0971a30bd6a19bf933e4e78e159436730c3ac9d13938c7fe3de209abba8136036bc70a1de7f1b3d1a615c3c

  • SSDEEP

    6144:UooTAQjKG3wDGAeIc9kphIoDZn+POMENkUqFPXIx8PpQszlNzwqQTVt+tHupugYC:U6PCrIc9kph58Okr/IxCzlNsx8gvTr

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\45bf6a0ad65d06cebf83d44bb2784253_mafia_JC.exe
    "C:\Users\Admin\AppData\Local\Temp\45bf6a0ad65d06cebf83d44bb2784253_mafia_JC.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1376
    • C:\Users\Admin\AppData\Local\Temp\7291.tmp
      "C:\Users\Admin\AppData\Local\Temp\7291.tmp" --pingC:\Users\Admin\AppData\Local\Temp\45bf6a0ad65d06cebf83d44bb2784253_mafia_JC.exe 7E11648A63642F394AF8DD97847986E9FB1C6641A95D78FD73E93D5B25402ECE1F2831843C6BC2BE1F37F83AD5A662EEABA866ED193884F9521FA14399DA5D70
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:3024

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\7291.tmp
          Filesize

          412KB

          MD5

          b4ebd87fa3783bff1c4a8c13fc2ea59c

          SHA1

          14eabf5cf067b67587d1763de14e8885ed129de0

          SHA256

          d87cccced033aca342c414108ff6349f6d6610c83722f84d668d5b58e2200c60

          SHA512

          2c4989dad9456cfbc9e093eb0d986278f0d6b6fd04776a9d671730fa3a5f3c460bb657273d1a5627e8b2ff825914757185d2092d2707767443c10a9a395d4990

          Download Submit

        • \Users\Admin\AppData\Local\Temp\7291.tmp
          Filesize

          412KB

          MD5

          b4ebd87fa3783bff1c4a8c13fc2ea59c

          SHA1

          14eabf5cf067b67587d1763de14e8885ed129de0

          SHA256

          d87cccced033aca342c414108ff6349f6d6610c83722f84d668d5b58e2200c60

          SHA512

          2c4989dad9456cfbc9e093eb0d986278f0d6b6fd04776a9d671730fa3a5f3c460bb657273d1a5627e8b2ff825914757185d2092d2707767443c10a9a395d4990

          Download Submit