Analysis
-
max time kernel
120s -
max time network
132s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
-
submitted
31-10-2023 18:03
General
-
Target
NEAS.2023-09-09_1fa3a597e2f4529827e6704ced857e6e_mafia_JC.exe
-
Size
444KB
-
MD5
1fa3a597e2f4529827e6704ced857e6e
-
SHA1
a63c3b717165c6600937dcb069e5616ecd76a40c
-
SHA256
cb9af880824f935c745ce0aad8a5f1e2a48193f0875b704adeb4db0dc8c60174
-
SHA512
26dead34bcf9c18742261892d8d9d51d685c4910029abac04a05b6ad034ee5b194663a95695ca3147cdec140823ea052279f4d172d51ed74c07faffbfc81f44e
-
SSDEEP
12288:Nb4bZudi79LEWN2LYzGoxuIujRw/mhWqSA:Nb4bcdkLzNUFwu
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.2023-09-09_1fa3a597e2f4529827e6704ced857e6e_mafia_JC.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.2023-09-09_1fa3a597e2f4529827e6704ced857e6e_mafia_JC.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\6AC4.tmp"C:\Users\Admin\AppData\Local\Temp\6AC4.tmp" --helpC:\Users\Admin\AppData\Local\Temp\NEAS.2023-09-09_1fa3a597e2f4529827e6704ced857e6e_mafia_JC.exe 30E766CF523F86016C52B1D01BB312847B82705E5D6410E25AD37C0AC6E9D3B8D81F32E48FB0B811F7EE75F25BDE4E07589E9CBEEEAE9934637ADB0FA8F71E112⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
444KB
MD5b58795b60d71a52953feaec8dec9ac48
SHA1561ddaf781e96d2941ddd9bd8482c1878da48be9
SHA2567c2561e3dd45fe470983177af5d18acc32fd691952fd08d5ab6a08fc3831c8c7
SHA5126ec2c46148b00155fdd561f60e60d711d4f4e50a23883d04c7e2a778ec2f796de1d35cdc146c4073c449dbf37d42aa83a37bf323763be67eeea9b1557f985463
-
Filesize
444KB
MD5b58795b60d71a52953feaec8dec9ac48
SHA1561ddaf781e96d2941ddd9bd8482c1878da48be9
SHA2567c2561e3dd45fe470983177af5d18acc32fd691952fd08d5ab6a08fc3831c8c7
SHA5126ec2c46148b00155fdd561f60e60d711d4f4e50a23883d04c7e2a778ec2f796de1d35cdc146c4073c449dbf37d42aa83a37bf323763be67eeea9b1557f985463