Overview

overview

7

Static

static

3

2024-01-11...ia.exe

windows7-x64

7

2024-01-11...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/01/2024, 05:59

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-01-11_5d0d2529efb703d397c29c8b15d11653_mafia.exe

  • Size

    468KB

  • MD5

    5d0d2529efb703d397c29c8b15d11653

  • SHA1

    acefa6d8d611c7c1f79db70cb64dde8c5a65904e

  • SHA256

    8ef3ce164f423665aec4cebeef2528a47c0081c7f9fd4a4c4c09f6c5b0798924

  • SHA512

    7066995658490a6356c56ab4e7b44bce07d13069148fd5bc925ac2ae4bc360988a8c3b6989fb5a7b183a3e1a9569e1f6a9c0d0330dd24f15965fcf666a0b45d1

  • SSDEEP

    12288:qO4rfItL8HGzjZBYWnXsLRpICx7OL+S55EZ59ib4/7bWmeEVGL:qO4rQtGGz9B+ld+igU/umeEVGL

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-11_5d0d2529efb703d397c29c8b15d11653_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-11_5d0d2529efb703d397c29c8b15d11653_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1272
    • C:\Users\Admin\AppData\Local\Temp\86A.tmp
      "C:\Users\Admin\AppData\Local\Temp\86A.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-11_5d0d2529efb703d397c29c8b15d11653_mafia.exe 410105155230C53F71841E496FF79F5C57FAEB08164C1E114EBF18E240A0DEA508CD61A31A1365CDC1519B599B6C7DC4F45AF9C84EC1841CCC315CF01DDE3231
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2984

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\86A.tmp
          Filesize

          468KB

          MD5

          a5e2e888c0d4d35dd0e0c9246b102b8c

          SHA1

          f80f2081fb16ce153c46663f9d8856d287181a8f

          SHA256

          a0663b45c831a6f9db5e270b72b2f4c031634ae8efcc25127c24841143c8ce15

          SHA512

          5d149af6016ecb83e4a0be15391ee54a4bd40c309bf8c82bf0c2bbfc1acc5d7f85e7c06a3a21d9e54065deef5b4cb25e06702b59870e178238ffef56e0297336

          Download Submit