Overview

overview

7

Static

static

3

2024-01-23...ia.exe

windows7-x64

7

2024-01-23...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    23/01/2024, 21:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-01-23_581a3140b9216aab76af404675f510a1_mafia.exe

  • Size

    468KB

  • MD5

    581a3140b9216aab76af404675f510a1

  • SHA1

    bd561a5e895aa23340fd0ec4ae8325f5bfc00736

  • SHA256

    0fe2c4db428923f8183dd8b4ce4db6fd70ec795fb7d6e0486afd6006f778d8ce

  • SHA512

    94c16b4dee5aa7a4a8268fecc580ba7617a96adb2cefda0ab87c44f9634cb63ed5ff5dab66be2a5de5623b59c480170b56712420c5e08bc15a7d9260962b9eb6

  • SSDEEP

    12288:qO4rfItL8HG9hEpB6v12IQCzXSp4IkDgiumA7bWmeEVGL:qO4rQtGG9h669dQqXubiumAumeEVGL

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-23_581a3140b9216aab76af404675f510a1_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-23_581a3140b9216aab76af404675f510a1_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2120
    • C:\Users\Admin\AppData\Local\Temp\47E9.tmp
      "C:\Users\Admin\AppData\Local\Temp\47E9.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-23_581a3140b9216aab76af404675f510a1_mafia.exe 141D6E7EFBC5127E5129FB44039A1C7C09D7C3F01FB6AAE2E0F83C2112C2CC1767A8878E4CA8C785A20EBC39EE7A1F5F79719817D541F9576596C7D329F70DF6
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\47E9.tmp
    Filesize

    468KB

    MD5

    23a897efd99a3746e88edb83455e783e

    SHA1

    d992b67a8eb7870da1e69b07b574d265834c43ae

    SHA256

    518734cdbaa228a1a3ddf9f1a7461a47d4fa50073cd57e793c6f78889f9d7f5f

    SHA512

    7240aa1bf12c9af765f49625e6bc1aeb55eebbfc5e043bd516f69174cdca5c21a68b5c6ad75d5426d272cc0314d1c1be1c734495700729d1613d3d74d2aa37e7

    Download Submit