Analysis
-
max time kernel
121s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
12-01-2024 06:06
General
-
Target
2024-01-11_dbe11c914ce8ab1560005440bd232453_mafia.exe
-
Size
476KB
-
MD5
dbe11c914ce8ab1560005440bd232453
-
SHA1
67e49b61535b3ab60c8ada9476613917a228fc8a
-
SHA256
5cfb0876056f3fe1921adcb4a91633cb7ccce0a414f8a40ef10dc2fee92e6f90
-
SHA512
b5195c6f39e7b26d909790fcf2a7fa5e94ff21a5a0585d3e1618c0d7e67019c1641d5c35d83afd35294d7eb780d98ba0bf2e1cf19e5fe142eeffd81417c56fc3
-
SSDEEP
12288:aO4rfItL8HRcWl6TsDrZat8+trn7K9wlsDpVFd:aO4rQtGR5ldDsm+Z+9wlsDpVFd
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-11_dbe11c914ce8ab1560005440bd232453_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-11_dbe11c914ce8ab1560005440bd232453_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\A8DD.tmp"C:\Users\Admin\AppData\Local\Temp\A8DD.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-11_dbe11c914ce8ab1560005440bd232453_mafia.exe 5907CCF2E6A0144E1F515C22DBD819D67207BD16489A7851D507492588D397C4E8A553530963FA198F39366F4AF1526EFEECE5F99B9BEC395EB59BFA53A4C86E2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
476KB
MD524971afeb9c29418b072fc47248cd7d2
SHA1dd940b1c9fc67f4c2332e20d1ed5c9d84b221748
SHA256d2b181e675a88e7ab52ef73ce79d1e562dd2956f3a12fc081d8dd1fd806b0c0f
SHA512f40e96e3f24f3bcc4238fe11468fb8d6b80acbf456ff51ed2c80e2464aec219608c7f513d6189debba5905a2aa2e4740f99a8697f0e5784a925c6337920234e9