Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
07/01/2024, 12:12
General
-
Target
2024-01-06_7bd3c0f4ebc024b540cd4f045da20e32_mafia.exe
-
Size
473KB
-
MD5
7bd3c0f4ebc024b540cd4f045da20e32
-
SHA1
e100e536089679634f1d41865bf2fa71d4261a1f
-
SHA256
94952ac39ebc2a379076e44ac774980c56a5319925ab3105a167754d7216d15e
-
SHA512
26d3cd0c9f0a26f90a336159d3b2947646d6589b8fafc9f41fa272f1d5e4be81fbb76448e2c02f081faf11bcedccfa7968c9d49042ff31ff1ec064a04f7e2f22
-
SSDEEP
12288:Nb4bZudi79LjlxgpSHX5RW8Ry0WKR+9TeT5iSl6emAsCA0a:Nb4bcdkL5xwS3n1zWKRWeNiSlE5
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-06_7bd3c0f4ebc024b540cd4f045da20e32_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-06_7bd3c0f4ebc024b540cd4f045da20e32_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\14A9.tmp"C:\Users\Admin\AppData\Local\Temp\14A9.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-06_7bd3c0f4ebc024b540cd4f045da20e32_mafia.exe E713DCDD206076CA1D8EAF36569E12B12840A16815AE28D7D9376499DAF20953552AB6850D24D40106865286252C52C26ACFA574EC924BE7E50BE702D6FD2D112⤵
- Deletes itself
- Executes dropped EXE
-