Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
07/01/2024, 12:17
General
-
Target
2024-01-06_e0a62fb0123088600f10b4238b7dc9c7_mafia.exe
-
Size
414KB
-
MD5
e0a62fb0123088600f10b4238b7dc9c7
-
SHA1
7732a35a4bc743d401c73acd7da544dd36572196
-
SHA256
e127187125bf2a7ec72adfb37d317d915e1274d7a60726bec1b2481ffdab02be
-
SHA512
c30884b451ab4db9921a12f8e521882bcf8a052ce76a0d74cf10e727794effb71bc9946c165c1e37fce724dff2399f9ea15e718e28a2633caf15b4c54f779caf
-
SSDEEP
6144:Wucyz4obQmKkWb6ekie+ogU6BYneQsF83DF5WxV3WstP40Mo9+sxHg4nVkG03Nqr:Wq4w/ekieZgU6GVDHykOZd+sxjn3Yqlx
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\162F.tmp"C:\Users\Admin\AppData\Local\Temp\162F.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-06_e0a62fb0123088600f10b4238b7dc9c7_mafia.exe 88181D5E323671A9EB30FD1EE35976CCE53B12F3EBDBCA68CF060B23435DCFB637E5E829F254120CD143ED2290361CF7AF4230302BDFFEB0DCD03970F265EE0F1⤵
- Deletes itself
- Executes dropped EXE
-
C:\Users\Admin\AppData\Local\Temp\2024-01-06_e0a62fb0123088600f10b4238b7dc9c7_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-06_e0a62fb0123088600f10b4238b7dc9c7_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
94KB
MD55f3756a6054ce7767acf8c9792e40640
SHA102b21fb665e274348d9f833be2b66a4ebcc0a981
SHA2565a6465fe1ec9f705351b2e6acfdada457855641a9bd9fd197d3141b574d8d02d
SHA512d8208777a5539bce843db24a1007ead52036fcd811e3e6e1c2deb8281e231bbdeabe3f480aefb3ee5c8e546a06845d194b8a188fc48cc80d43757a24be983a9f
-
Filesize
369KB
MD5f84380ec55ca853ee95ab182a3ac6263
SHA1a2307b982bf434473021e9d927e0ed1d48b17c69
SHA2568673614a227a225783c906bf1a1f8fb615b3e49df9f07f4c008b13cc68ec910a
SHA512c7580a6e6efe75909be2058143e891291e14ca8b669db6ade4ceca6f2681b977b618f099b24bb0b5a8cb21e677e419439387af4a16377408815726bb454627eb