Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
22-01-2024 20:36
General
-
Target
2024-01-22_53ac6e3752718d8dc53284be2ee7a68c_mafia.exe
-
Size
433KB
-
MD5
53ac6e3752718d8dc53284be2ee7a68c
-
SHA1
11a8478a7081a3695f45b5b98a5047dd7e6e76e9
-
SHA256
03bd57dbe7731b71de4f42225f155ec7114dcac91db6060dc20fd5d5f2b575a8
-
SHA512
2e28d512c7c3c7e73b889a6a75c9b1cbf41e37006a1a68ccc08b3624923799b02d04492c6ce2ede53944844a5b25c66c298fb9b7541b398cfb2e41bd8643c5d5
-
SSDEEP
12288:Ci4g+yU+0pAiv+E5EzdX0XhblCokxU+Atn:Ci4gXn0pD+J10RookxXW
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-22_53ac6e3752718d8dc53284be2ee7a68c_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-22_53ac6e3752718d8dc53284be2ee7a68c_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\4328.tmp"C:\Users\Admin\AppData\Local\Temp\4328.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-22_53ac6e3752718d8dc53284be2ee7a68c_mafia.exe E6B5350168697C0C02074D52D4B0B83F09C8C62743F313719F23B66D68536CF0624CFBBDDA78BDE18787E58312EDB49B563724C29C21CF3D95FD2AE68E199BC02⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
433KB
MD58f0c9cbb3c9ef32870d1cc87972c840c
SHA1475732fee87dd4b2451d895de3799788ddb1f852
SHA2560e9fc5b14534fecdc035d65be859c99d145c15c0c85f1129213cc1a949a88b28
SHA5123c8b050f3ef919446799c4bfd9a65eaa304195f79bae23b3dc046b85a84bf861f4631c0f91be8ce6a6c537dfe91354989358cab95bb4f0f56f34ec9daf61d377