Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
12-01-2024 06:06
General
-
Target
2024-01-11_cc239d6254dbb392f031fe4ab414db6b_mafia.exe
-
Size
473KB
-
MD5
cc239d6254dbb392f031fe4ab414db6b
-
SHA1
5352ef49fc735bf2186f3e4243ea687219e3a4e7
-
SHA256
df4f909412c78991a22636d7ec668d78a3cf8a80129f9b584d959dc9a2e11be1
-
SHA512
c89e748f465baba99dc9d2758ef8ded760ed7c8c9ab53446a1fc7bcff3172ae959677b19c8a0f7d595988a0ed300b487e744dddac707c0e0e908b24239340ed9
-
SSDEEP
6144:fFrJxvldL4c5ONK1xgWbd1s79+iStj/mbpgLmFVwZy9aiIAu6ejz2+7g67ATCkqN:Nb4bZudi79LfbSw8yQEua+t7p2VxA0a
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-11_cc239d6254dbb392f031fe4ab414db6b_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-11_cc239d6254dbb392f031fe4ab414db6b_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\879.tmp"C:\Users\Admin\AppData\Local\Temp\879.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-11_cc239d6254dbb392f031fe4ab414db6b_mafia.exe 4DAD445C9DB295731D57D4B3516E2454DB7E30B6C1F654DB2BCAA5A3C31BD63A3E8F0D4271AE7EE9953AB61F9D7F481013D9CF7E0A865AF2C2BB8004E3CBCFC92⤵
- Deletes itself
- Executes dropped EXE
-