Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
-
submitted
31-10-2023 17:28
General
-
Target
NEAS.2023-09-07_4063860aab5c8b93ac9702699865c6c8_mafia_JC.exe
-
Size
414KB
-
MD5
4063860aab5c8b93ac9702699865c6c8
-
SHA1
0c0565c8b567e415d4221bc27ca65167eb22413d
-
SHA256
f58e652844a17d59f8ea876f4b364abef1de149dad70603507f324ff0ebdf50a
-
SHA512
6f9ac5d13f17179cd5a2ecc547b54a5ac7c25e068f028a6ee1f0ed7b3878b14cf6e76b3b5bf4c83131e01b03163b8f14e995edb2b8944569bc5ed71da6a86d73
-
SSDEEP
12288:Wq4w/ekieZgU616MSpPI300ch+6is+HeBXelx:Wq4w/ekieH6AFYch+zs+yur
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.2023-09-07_4063860aab5c8b93ac9702699865c6c8_mafia_JC.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.2023-09-07_4063860aab5c8b93ac9702699865c6c8_mafia_JC.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\6EAB.tmp"C:\Users\Admin\AppData\Local\Temp\6EAB.tmp" --helpC:\Users\Admin\AppData\Local\Temp\NEAS.2023-09-07_4063860aab5c8b93ac9702699865c6c8_mafia_JC.exe 7C33707BC3E3C5D85DF54C3D5A7EED0EBB4BF52D3D287224D226C3FD8C7827AE21337B0E4EA64876BA8C9BBD7DF5885944F54315B53B2BE3BE369161AD94A2152⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
414KB
MD51dc602df611e5aad9eadde84a2833a48
SHA1275e29fa0148eb2cacf7f0ebd2c0139b962d57c6
SHA2562abb57f1ec8618a8965741a994b6eac776d2d735a59e3c78d9dbd768b320b31a
SHA512d8f85ec8fd22bbcf81e9f9275cb458636fac1204b34e71823b797cfa20bcf9c979efea436754d9f13aa43d07486dbd81314bd01925f9b6e42c1f09251cc5b866
-
Filesize
414KB
MD51dc602df611e5aad9eadde84a2833a48
SHA1275e29fa0148eb2cacf7f0ebd2c0139b962d57c6
SHA2562abb57f1ec8618a8965741a994b6eac776d2d735a59e3c78d9dbd768b320b31a
SHA512d8f85ec8fd22bbcf81e9f9275cb458636fac1204b34e71823b797cfa20bcf9c979efea436754d9f13aa43d07486dbd81314bd01925f9b6e42c1f09251cc5b866