Analysis
-
max time kernel
117s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
12/10/2023, 19:16
General
-
Target
2023-08-26_1368c497c6dfee32c1616c5b7685e6d6_mafia_JC.exe
-
Size
412KB
-
MD5
1368c497c6dfee32c1616c5b7685e6d6
-
SHA1
0bac08e8e56b12212ae051fa8daaff4cd7a2121e
-
SHA256
185b08fae3c7f396c24573d212131175ccfda559dbce36d533e9e2df489c51b8
-
SHA512
a9504f8a7ee9587d6574cdf528d29ef5fa062b943db277972f94211291c6bc44c76b9c2cccea3a51f1458b7edb4280f4586967fb926784f275c5c4c71fec006e
-
SSDEEP
6144:UooTAQjKG3wDGAeIc9kphIoDZn75uOIDtH4tUC6InwI8iogORJf7gzib7uP:U6PCrIc9kph5YDlgJnbogO7fMz2K
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-08-26_1368c497c6dfee32c1616c5b7685e6d6_mafia_JC.exe"C:\Users\Admin\AppData\Local\Temp\2023-08-26_1368c497c6dfee32c1616c5b7685e6d6_mafia_JC.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\D1D0.tmp"C:\Users\Admin\AppData\Local\Temp\D1D0.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2023-08-26_1368c497c6dfee32c1616c5b7685e6d6_mafia_JC.exe B4CF573B7173872C3192BAC72C413A987C96F532A8DCEBB9BDA605AF8DF27AC618CDC486083DCA3CE667A467681F0D872BE234041A42803D9AACAC964B62678D2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
412KB
MD589c548c670d079d322bd980a9459b283
SHA114305e9c6c5a3030e713cdc026872c40a0134356
SHA256cf43cfb5c1d61023c8303a837b34fbaf98a5cd45f3a67c25d7c2d5e2b730e933
SHA512bc475ecaed4dc4861679661ff08079fa14ad82176221a3f0446f69b5c0bca66640e7823ddfba88f89006ecc49eb91199e406fc079b1a1661996b0ab3acf1f2eb
-
Filesize
412KB
MD589c548c670d079d322bd980a9459b283
SHA114305e9c6c5a3030e713cdc026872c40a0134356
SHA256cf43cfb5c1d61023c8303a837b34fbaf98a5cd45f3a67c25d7c2d5e2b730e933
SHA512bc475ecaed4dc4861679661ff08079fa14ad82176221a3f0446f69b5c0bca66640e7823ddfba88f89006ecc49eb91199e406fc079b1a1661996b0ab3acf1f2eb