Analysis

  • max time kernel
    142s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-08-2023 15:32

General

  • Target

    49d7ea8a6494b2d00f958483ae5a19a4_mafia_JC.exe

  • Size

    3.8MB

  • MD5

    49d7ea8a6494b2d00f958483ae5a19a4

  • SHA1

    66a74925a7b244233b7abc29d4b0ed283f0827b2

  • SHA256

    a9ef39d7501a782e9b918cb944ddca2b4475f3671f9a0898dff55c14f8ef5ff8

  • SHA512

    02126c505926dd61c341cc96878a7bdfed3e926aef461569ef05fddf61070ae72ae0bf6aab43b71e300dbb7150f69dca7e174f8932457c546ecdd2b9e68d9a1a

  • SSDEEP

    98304:jgWR746uh0hQssV7C6YumiQdTJY3Pv9rj+7y0n7AOd2y:jgWRhWWWm7Cv9rj+7MT

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\49d7ea8a6494b2d00f958483ae5a19a4_mafia_JC.exe
    "C:\Users\Admin\AppData\Local\Temp\49d7ea8a6494b2d00f958483ae5a19a4_mafia_JC.exe"
    1⤵
      PID:2940
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2940 -s 584
        2⤵
        • Program crash
        PID:4820
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2940 -ip 2940
      1⤵
        PID:3096

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads