Overview

overview

7

Static

static

3

2024-01-11...ia.exe

windows7-x64

7

2024-01-11...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/01/2024, 06:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-01-11_f6930f8d1b0f5946590b01c5be055f9a_mafia.exe

  • Size

    473KB

  • MD5

    f6930f8d1b0f5946590b01c5be055f9a

  • SHA1

    2baa9665756c1144cd902504944e633d0cb04853

  • SHA256

    30359462930bb90672a85ca00f355f5734b3f82b1d5836072649a86938f9b1f5

  • SHA512

    e2f77af131e5e7e8c1902c462c4446c790cfea72870a98f18f9a483af0df6430db4006dee181f7eea7282806d2cc6a4bd0f9db570b5d7b40aaeedf9857bc2c7e

  • SSDEEP

    12288:Nb4bZudi79LrNwO0NKn/K0TTMxtVJ60GTRA0a:Nb4bcdkLrNwOrn/K0MxNf8Y

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-11_f6930f8d1b0f5946590b01c5be055f9a_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-11_f6930f8d1b0f5946590b01c5be055f9a_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2292
    • C:\Users\Admin\AppData\Local\Temp\84C9.tmp
      "C:\Users\Admin\AppData\Local\Temp\84C9.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-11_f6930f8d1b0f5946590b01c5be055f9a_mafia.exe 65236EE625A3A27252958B523785FCC3DFD9B63AC9875E3A4D819E90793BDA7F1F5945693D4E802D58CC3FD87BB19A3E5B34CB986C1AEEAB3869AA0C4A119F7C
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2740

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\84C9.tmp
          Filesize

          473KB

          MD5

          86cb06e035d5abd72e70791291b27bd0

          SHA1

          8e33de834a1ef7aed82c457c5e761dd8b94131d6

          SHA256

          9ac9add59ebb44838face091f01986601b0c7bb4d0f0826a6f16849109576c2b

          SHA512

          edd24c6d7d4f0fa523c4a1f3d43db4b33177419215279aa88837d677ea1ed9047c99102cab35005d1589280c5afc837dcb79b8520b3c449e96b5e40ebdd455cd

          Download Submit