Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
05-08-2023 20:33
General
-
Target
7a98617f30e957d5aeace5af51393ae5_mafia_JC.exe
-
Size
414KB
-
MD5
7a98617f30e957d5aeace5af51393ae5
-
SHA1
99f7696dc731aaae5447d63411645c77713414a3
-
SHA256
a6bdab84cbd13fa8eddfe0df2d070a4fc8ccba9d47e9b0b337467bbe74946d1a
-
SHA512
d7a67c94a4f0ea1b67277d09ebc59be55e046b13da8edd9cdc1177d85d2819ca41d56b0ea9181b36706227928ba5de31ad4c077e65635fe13ff0b032232e375a
-
SSDEEP
12288:Wq4w/ekieZgU6KZl+IaGEsgx1Bvs3YQxxD9fDlx:Wq4w/ekieH62l5ELxLs35xxDhDr
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7a98617f30e957d5aeace5af51393ae5_mafia_JC.exe"C:\Users\Admin\AppData\Local\Temp\7a98617f30e957d5aeace5af51393ae5_mafia_JC.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\7040.tmp"C:\Users\Admin\AppData\Local\Temp\7040.tmp" --helpC:\Users\Admin\AppData\Local\Temp\7a98617f30e957d5aeace5af51393ae5_mafia_JC.exe D4AEFAC6F5A2F5F5029BBE3FBB1B9F5B898C7822FDB504328F55030F713B93C21CEB2BAD270D8B85990B9FEC7E2F15398D50F9CECCD9999ED57A4F46CF0A0EF22⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
414KB
MD5552c71809c410e4c4a1540fbefbd7082
SHA12f71779511471de912effea719a8184e046eed73
SHA256461fef8b9004a4f0f5aa2b49a7b8b4cfb8ae130457fa4c5e57c848da2993d175
SHA512fa918a86157be1b5c6796f6e927740b6d4f1772068372ace03ecbf80c3fec6fdf328623e5c301da8f448aeb26bf0d808808b8cbe0cc0a486456efd2c05af04b2
-
Filesize
414KB
MD5552c71809c410e4c4a1540fbefbd7082
SHA12f71779511471de912effea719a8184e046eed73
SHA256461fef8b9004a4f0f5aa2b49a7b8b4cfb8ae130457fa4c5e57c848da2993d175
SHA512fa918a86157be1b5c6796f6e927740b6d4f1772068372ace03ecbf80c3fec6fdf328623e5c301da8f448aeb26bf0d808808b8cbe0cc0a486456efd2c05af04b2