Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
06/08/2023, 18:36
General
-
Target
92352f01dbfd195ec161d68f95662772_mafia_JC.exe
-
Size
2.2MB
-
MD5
92352f01dbfd195ec161d68f95662772
-
SHA1
b2bf3a3702bf788edd7c3d1d08f2c39a0e3ac08e
-
SHA256
e9802152fae1f5dd25e13758a235200b804763ba9cc424c0c0fd41514338bc79
-
SHA512
069f669e3dc36496b1b72809e4034aa7f168c44c87a4aeb0396777cd6119018ab68af54f66b6175a82ad446cfebd64b4d7195ec4f7e0ca5b31e76cf0d2f36db7
-
SSDEEP
49152:6E4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/kionurM0EIMa1uwlXoYN1oC8:6rj834iwJjn7gu5LmMapuNyiMurM0eUw
Malware Config
Signatures
-
Executes dropped EXE 2 IoCs
-
Drops file in System32 directory 1 IoCs
-
Drops file in Windows directory 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 8 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\92352f01dbfd195ec161d68f95662772_mafia_JC.exe"C:\Users\Admin\AppData\Local\Temp\92352f01dbfd195ec161d68f95662772_mafia_JC.exe"1⤵
- Drops file in System32 directory
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
644KB
MD58f64c410824735f7a3fc05eafbc59f31
SHA123d5c1d5ea8721479f09f1a1bf2e10e6c95096c6
SHA256e3f2fdc4ede5657c921572105fceacf1cf14181b92c2494e692f42ecca33d88a
SHA5125789f9fa5e4565590d8aa3950f1adaca36a5548ae4a31afc7635714b3359dcb5499fd91761f8c24c92e1b8bd55bc1e51a45d9a341d89c9475333118539d7b0df
-
Filesize
644KB
MD58f64c410824735f7a3fc05eafbc59f31
SHA123d5c1d5ea8721479f09f1a1bf2e10e6c95096c6
SHA256e3f2fdc4ede5657c921572105fceacf1cf14181b92c2494e692f42ecca33d88a
SHA5125789f9fa5e4565590d8aa3950f1adaca36a5548ae4a31afc7635714b3359dcb5499fd91761f8c24c92e1b8bd55bc1e51a45d9a341d89c9475333118539d7b0df
-
Filesize
2.2MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
2.2MB
-
Filesize
656KB
-
Filesize
656KB