Analysis

  • max time kernel
    143s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/08/2023, 16:04

General

  • Target

    5df29cc2a55e6c5baea90b56960f0395_mafia_JC.exe

  • Size

    833KB

  • MD5

    5df29cc2a55e6c5baea90b56960f0395

  • SHA1

    03477660f84da68b08843e961dc01daa2bf2e2a1

  • SHA256

    0bbe91bef9cc68b973943aa33708c0232c5915f5ccda2b0e6bbf8f6f34a9200c

  • SHA512

    b69c49aabe826ca612a05b14c734880f832d1d9d4e032869d75e71788641ef2ea8fd1c404d41f6c4dc7351aeb0f1c126a9badb91ce43c189ca94946009f08c0e

  • SSDEEP

    24576:pZGsRD9LvrJlMUwQhEbfL+Xd4WZt6XyHYY:ysTsUw+EbSXd4Wj6Cd

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5df29cc2a55e6c5baea90b56960f0395_mafia_JC.exe
    "C:\Users\Admin\AppData\Local\Temp\5df29cc2a55e6c5baea90b56960f0395_mafia_JC.exe"
    1⤵
      PID:3288
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3288 -s 220
        2⤵
        • Program crash
        PID:3096
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3288 -ip 3288
      1⤵
        PID:2956

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/3288-136-0x0000000000840000-0x000000000091CC60-memory.dmp

              Filesize

              883KB

            • memory/3288-135-0x0000000000840000-0x000000000091CC60-memory.dmp

              Filesize

              883KB

            • memory/3288-134-0x0000000000840000-0x000000000091CC60-memory.dmp

              Filesize

              883KB

            • memory/3288-137-0x0000000000840000-0x000000000091CC60-memory.dmp

              Filesize

              883KB