Overview

overview

7

Static

static

3

2024-01-23...ia.exe

windows7-x64

7

2024-01-23...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    23/01/2024, 21:53

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-01-23_d80e050ae6dffe394b7ee20ddc742598_mafia.exe

  • Size

    433KB

  • MD5

    d80e050ae6dffe394b7ee20ddc742598

  • SHA1

    44fbe95c1f9457fdb946adf630e784644a18c7e4

  • SHA256

    5822941b43715e7cab7441f475645c51063363e184f2a81b83a916deeeb65891

  • SHA512

    07645efc1f7a37c2a25f57043ad6c213e2e5c74538f5a779dde5d97b23f4903f251f1b80570400bcc9c37fe6f3a1a5bf17198174a2171a879696713e09741c8b

  • SSDEEP

    12288:Ci4g+yU+0pAiv+JNF001RC1NQQX+Upzvz9n:Ci4gXn0pD+JDRFQX+G

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-23_d80e050ae6dffe394b7ee20ddc742598_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-23_d80e050ae6dffe394b7ee20ddc742598_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:3012
    • C:\Users\Admin\AppData\Local\Temp\17A6.tmp
      "C:\Users\Admin\AppData\Local\Temp\17A6.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-23_d80e050ae6dffe394b7ee20ddc742598_mafia.exe 3935A893246AEB0EDC8AA4B7B5913B72DDAA8D8E42AE3EA8757851836FF74FD850C7FDBA2BD3406474B7EB34BE6B00F6B4F297C635B7CE61C26985B972645460
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2064

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\17A6.tmp
          Filesize

          433KB

          MD5

          988fe68fffcc17e9aef6ddf39affdef5

          SHA1

          e13f94455f0c51b4803392acff6d04dd242f2a11

          SHA256

          f1ea66ad950fa25328d9a13382613f0d8c7eb9b2aa0ec351f167925d6a75e756

          SHA512

          6f31874cd9f96301548639e32d5d39a86e2afb6d562ab1b59722004ba6735d293511b54146044148778ebcbbb26421299e388a6cd99aa7b2d3368f444e7c4d8d

          Download Submit