Analysis
-
max time kernel
135s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
17/08/2023, 16:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1776634c81bba4c6646baa6f819621f4_mafia_JC.exe
Resource
win7-20230712-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1776634c81bba4c6646baa6f819621f4_mafia_JC.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
1776634c81bba4c6646baa6f819621f4_mafia_JC.exe
-
Size
623KB
-
MD5
1776634c81bba4c6646baa6f819621f4
-
SHA1
f6f1027e8f4cea09d3b6114d3da7642ac50c8379
-
SHA256
db4ecda700030ca5cc32041efb47395d75115cc1ac0ec7be779338d564f6707d
-
SHA512
c23f3c4c72b308ce2c29e5487f2954f01856aacc69cb4334418ebb5aa93fac01d76d5df0ddcd04ecef53a249b86071a22a9c48303a5f909e7bde3d05878d6812
-
SSDEEP
12288:otvGvZ08+6i4AtG5HgsUGVs26rkzvo9p36hTs8R7oYGnPLeir:avGR08+6i4W41x9M9p36hTtR7OPLeir
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1964 2328 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\1776634c81bba4c6646baa6f819621f4_mafia_JC.exe"C:\Users\Admin\AppData\Local\Temp\1776634c81bba4c6646baa6f819621f4_mafia_JC.exe"1⤵PID:2328
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2328 -s 5122⤵
- Program crash
PID:1964
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2328 -ip 23281⤵PID:1976