Analysis
-
max time kernel
119s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
12-01-2024 06:02
General
-
Target
2024-01-11_8f894c14a2c1c0a3b410919640bf3930_mafia.exe
-
Size
433KB
-
MD5
8f894c14a2c1c0a3b410919640bf3930
-
SHA1
dce3d32dc9b89e5ab003c68196dc5aa2ae3e511c
-
SHA256
bafca1616dac9781923fd76db20f50e51be837ab277d3140aa063a747655731d
-
SHA512
9503a5f4b1e98b8bbd3b8716c19519ba4dec19878602ca76eaf4046f2dbbe567e875f43bff99a4c23dd0ae85edb325b8ea6c29bc685b7f6f92381eb9642be204
-
SSDEEP
12288:Ci4g+yU+0pAiv+qfZxeoU+vjOprGXUupIWI0znNBYa79iVzbn:Ci4gXn0pD+Ax/7jmrGXdFlnNBYgU3
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-11_8f894c14a2c1c0a3b410919640bf3930_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-11_8f894c14a2c1c0a3b410919640bf3930_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\69F9.tmp"C:\Users\Admin\AppData\Local\Temp\69F9.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-11_8f894c14a2c1c0a3b410919640bf3930_mafia.exe A95A101BD3751835649A4D1212DB46C7BA5E362B8ECA8B61AAEC6ED4A04781CD40D0ABBE81AE66A0ABB9BCC21DA99A90124EB49FB9BC56A4F1E9CC1E1F52E3FB2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
433KB
MD54e3701b667f82af6e5903b863ca312fe
SHA1fed5cc34260cd080c5a6c08db96f3779335c7f45
SHA2565091ebf9b75536ea0b179171413c49dc8a6c1ae13e5df83fd0f5dc3c49ccf02d
SHA512d07c20458fb77ae62872ccebacec0e44c89a68e1fded87b417258cef952892d1ccc98347a0a22821efb72889702137373806863d231a2264e0dba1a56f5290ce