Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
29/08/2023, 18:11
Behavioral task
behavioral1
Sample
d702cc9a4a3d793d954bfaf11005ed16_mafia_JC.exe
Resource
win7-20230712-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
d702cc9a4a3d793d954bfaf11005ed16_mafia_JC.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
d702cc9a4a3d793d954bfaf11005ed16_mafia_JC.exe
-
Size
772KB
-
MD5
d702cc9a4a3d793d954bfaf11005ed16
-
SHA1
38e544f821012c55dd7d5f5de400037d5d3b2eec
-
SHA256
f8c8cb16e0e75181073403eb6a31bfd215d9b26721ecb1c02d949b0690a3c102
-
SHA512
6afbf8aec158b17eaf437134ddc38ce3cafc6a228d01d95e5195822b9802c4e9c6a3b3055249dc1c2248e78046b49e4d00f2ccc58d2a3f2152fc5fdebda4e91d
-
SSDEEP
24576:4Ru16WYdRNDl0Et8uEXE6dl5H92r5HpqNY:YVNDl0Et8uEXE6ds1Hpq
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4264 3004 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\d702cc9a4a3d793d954bfaf11005ed16_mafia_JC.exe"C:\Users\Admin\AppData\Local\Temp\d702cc9a4a3d793d954bfaf11005ed16_mafia_JC.exe"1⤵PID:3004
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3004 -s 3722⤵
- Program crash
PID:4264
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3004 -ip 30041⤵PID:2100