Analysis
-
max time kernel
118s -
max time network
137s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
11-01-2024 05:47
General
-
Target
2024-01-10_2669561cd1faada857cb7f087e40abb6_mafia.exe
-
Size
486KB
-
MD5
2669561cd1faada857cb7f087e40abb6
-
SHA1
44a106804224ae213f570989dbf53066a917d3ec
-
SHA256
ba2889256ed48ba589e29ed27b467004c1467eea9a1f12e4c5bb598e8ddfd3fe
-
SHA512
86e7ed6ae1fa0a0f8a026cbca298429169483f0b02be08a3ff55c93defd9d3d5ec9f8ab44ca3f5934654853a2d44c3b6d0f7e7cdc98680d8a07919d596827fa8
-
SSDEEP
12288:3O4rfItL8HPaz/ueaLqfiSObGI2tXwt7rKxUYXhW:3O4rQtGP7eaL3RGI2Gt3KxUYXhW
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-10_2669561cd1faada857cb7f087e40abb6_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-10_2669561cd1faada857cb7f087e40abb6_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\7A1F.tmp"C:\Users\Admin\AppData\Local\Temp\7A1F.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-10_2669561cd1faada857cb7f087e40abb6_mafia.exe 4637A7118F562004018347CEC2CD4E241F70F0FBE90A0116B4A0DD4217ADD2439B2A5F1A4E94E7F262644DDE21C226BEAE266C7CD037BC0F39325020CF7C2A352⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
486KB
MD52c131311ce8bb823303c12c913acf1de
SHA1a3af567cb34c6fb23b561a9b0053dd378e8b9282
SHA25684de883f1713543b64898deda5436c3d19c3fe7e7b39c2100209dc059113dc6d
SHA5129a9189e386f57799d99a1276d48e67578bc63f48c089cf3a3230a7479c51378b112c6ac53f44aff21d72b262087be54f307b0e4ab8128a036f9eb0a9ffc7ed01