Analysis
-
max time kernel
142s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
16-08-2023 18:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0d307756f57e6afcf746f159b100f8ba_mafia_JC.exe
Resource
win7-20230712-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0d307756f57e6afcf746f159b100f8ba_mafia_JC.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
0d307756f57e6afcf746f159b100f8ba_mafia_JC.exe
-
Size
839KB
-
MD5
0d307756f57e6afcf746f159b100f8ba
-
SHA1
5e9d590fe6c72dc2ade9304aa294070aac84b75e
-
SHA256
ff8d91b76d3c97a5c1941c67754103891be0099cb334e00bb5b853ace8d31b3c
-
SHA512
dd638cb8f9079445c069f73d643c33210822904b1bfd66f2554a83b96c88b9f106d4036d39e1de4a20274e0736ab5e1a46f33830e46c94f9cc0d35ecab75d861
-
SSDEEP
24576:0DDWfqlWNxed2eZLmIzDjLEIMkaBdJ4FWc8lWLggE9rEesA:AWfqkaDjAIBavJ4FLknErA
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 964 4476 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\0d307756f57e6afcf746f159b100f8ba_mafia_JC.exe"C:\Users\Admin\AppData\Local\Temp\0d307756f57e6afcf746f159b100f8ba_mafia_JC.exe"1⤵PID:4476
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4476 -s 2202⤵
- Program crash
PID:964
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4476 -ip 44761⤵PID:4856