Overview

overview

7

Static

static

3

b1a2c48e2d...JC.exe

windows7-x64

7

b1a2c48e2d...JC.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    27/08/2023, 16:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b1a2c48e2d53fa4d5211610349d20181_mafia_JC.exe

  • Size

    414KB

  • MD5

    b1a2c48e2d53fa4d5211610349d20181

  • SHA1

    fb2797858f06e0d2fb1abc0411bbede6a84c3514

  • SHA256

    9b3f7ceca2b158e113589ad16b1297fce95a35d943d3ed556eaa85f6032ae3a9

  • SHA512

    c4c217bd8da80e03ee06a2fd84593102bec463904be9c2dd33dbd69f32695113e2895642191b392b0628580ef716b3b1e19342fbe6acfe22576d0e7716ec6524

  • SSDEEP

    6144:ir+yo44RsriFZH1thUYea4+LZo2DrHiQRlOM4PAYUpz2MWGU4Dmf8qPP+vkzS:iA4g7yYea4GZo2yQRRYE2B4KfHXuCS

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b1a2c48e2d53fa4d5211610349d20181_mafia_JC.exe
    "C:\Users\Admin\AppData\Local\Temp\b1a2c48e2d53fa4d5211610349d20181_mafia_JC.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2600
    • C:\Users\Admin\AppData\Local\Temp\7EFF.tmp
      "C:\Users\Admin\AppData\Local\Temp\7EFF.tmp" --helpC:\Users\Admin\AppData\Local\Temp\b1a2c48e2d53fa4d5211610349d20181_mafia_JC.exe 68E8BD3B5988527B918910580CE7025468FD9A9CC23E614ADFE99591250DAADDE2D7EADF78717DB5563FD953B03994D6A97ABD8C6666566E3FB73E1D5E2EF8E3
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2780

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\7EFF.tmp
    Filesize

    414KB

    MD5

    758a0f9a20a617acf00a61ba551b7b1c

    SHA1

    bb9440f8026a151237b5b51cbc0a079ea9feaaf0

    SHA256

    5b70ae0103baaee828bd46d64317e6a7f56b05dcdf47f297ecf137d72b9fa76a

    SHA512

    3046991c47071367ddb02e7313895b1174cc84a3593d6ae9e0d636c8e122b26c5ef622cfe94cfb3616ae6c2fbc0f03e0e014c6a64d44de6a87132669f0706886

    Download Submit

  • \Users\Admin\AppData\Local\Temp\7EFF.tmp
    Filesize

    414KB

    MD5

    758a0f9a20a617acf00a61ba551b7b1c

    SHA1

    bb9440f8026a151237b5b51cbc0a079ea9feaaf0

    SHA256

    5b70ae0103baaee828bd46d64317e6a7f56b05dcdf47f297ecf137d72b9fa76a

    SHA512

    3046991c47071367ddb02e7313895b1174cc84a3593d6ae9e0d636c8e122b26c5ef622cfe94cfb3616ae6c2fbc0f03e0e014c6a64d44de6a87132669f0706886

    Download Submit