Analysis

  • max time kernel
    133s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-08-2023 13:57

General

  • Target

    a2babf45dd2e1a13ceafab01e02735f8_mafia_JC.exe

  • Size

    977KB

  • MD5

    a2babf45dd2e1a13ceafab01e02735f8

  • SHA1

    48448cd94fba4fd0476e61219dd893564df4f6aa

  • SHA256

    59d5412f88aeb75bdef6e83718e462d5d4ebef32daf56fbe8ae74b170a0d1aba

  • SHA512

    058183ec319d38448002509d7305b63c8e2628a64b6dcfce99a946f268ac84050ce3d67844fa30194a2ce51b1c2d9bf108d0a9f316f7ff2402784e5c51598462

  • SSDEEP

    24576:3JU1aJsTOZ6X/fRIRb3Dlbnjs4wfsv4MzGz7R:ZU1B03DJjs4w5MzG5

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a2babf45dd2e1a13ceafab01e02735f8_mafia_JC.exe
    "C:\Users\Admin\AppData\Local\Temp\a2babf45dd2e1a13ceafab01e02735f8_mafia_JC.exe"
    1⤵
      PID:4452
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4452 -s 224
        2⤵
        • Program crash
        PID:740
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4452 -ip 4452
      1⤵
        PID:4048

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4452-1-0x0000000000DA0000-0x0000000000EA3000-memory.dmp

        Filesize

        1.0MB

      • memory/4452-2-0x0000000000DA0000-0x0000000000EA3000-memory.dmp

        Filesize

        1.0MB

      • memory/4452-3-0x0000000000DA0000-0x0000000000EA3000-memory.dmp

        Filesize

        1.0MB

      • memory/4452-4-0x0000000000DA0000-0x0000000000EA3000-memory.dmp

        Filesize

        1.0MB