Analysis
- max time kernel
91s - max time network
117s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system - submitted
18/08/2023, 13:20
Behavioral task
behavioral1
Sample
25c5db2a31db6a22aeb4f35f62306f63_mafia_JC.exe
Resource
win7-20230712-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
25c5db2a31db6a22aeb4f35f62306f63_mafia_JC.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
- Target 25c5db2a31db6a22aeb4f35f62306f63_mafia_JC.exe
- Size 467KB
- Sample230818-qlbv9abc7y
- SHA256 21fa8200d2b8d2531ddbdc5f0dddc066916f030789055812ef0410321b2b8e44
- MD5 25c5db2a31db6a22aeb4f35f62306f63
- SHA1 8cec68d7e5f691a7a4171470357eb213c074a302
- SHA512 2780c53ddef9545cb1de08b4312b5ddbdfcba846e6df10e11647038608852791b62208f5e80898735dd39cccf62504a512c021e0dba84bd3957a9b0496912c65
- SSDEEP 12288:yMqFYULoWzniwtgGbl6mw/YAMOtwhF5ABqylCn6e+:yMqFbniCgGZ6T/DMO25Azon6d
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 3320 2736 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\25c5db2a31db6a22aeb4f35f62306f63_mafia_JC.exe"C:\Users\Admin\AppData\Local\Temp\25c5db2a31db6a22aeb4f35f62306f63_mafia_JC.exe"1⤵PID:2736
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2736 -s 3762⤵
- Program crash
PID:3320
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2736 -ip 27361⤵PID:4544