Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
24/01/2024, 15:24
General
-
Target
2024-01-24_645bfe7bf9ffcdf96045a30ffceb7049_mafia.exe
-
Size
444KB
-
MD5
645bfe7bf9ffcdf96045a30ffceb7049
-
SHA1
5b0fc30c9d14f60a4fb1fc194978bb28e1458aa5
-
SHA256
15233b8e0e79b70a090a34cc88ae697a7abb342971ee821181a3123490eb585a
-
SHA512
35bcce723f6659080da9c4854a7ec0958da88605cdf5bd88827bd6ae44505d25a1d09504e810192125519ba9825838c9acb55a8082a4544d8699fde6123df646
-
SSDEEP
12288:Nb4bZudi79L5qW7ntauFBz5a5gAU2wA4IFmeA:Nb4bcdkLpJLz05gpLIU
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-24_645bfe7bf9ffcdf96045a30ffceb7049_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-24_645bfe7bf9ffcdf96045a30ffceb7049_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\670D.tmp"C:\Users\Admin\AppData\Local\Temp\670D.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-24_645bfe7bf9ffcdf96045a30ffceb7049_mafia.exe 8F29A9BEE603FAED98153592D6D7D7951DCD2DA95B04C97B7E24764725FD57B0CC26C22E9B17F9326927F3955A229A76A2B18662F57B49D76745C5A9B2490FAF2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
444KB
MD5a9c9dc6f43892e91ad9e9486be689ba3
SHA1e1fa06074335a0bde36b8b233e888b2ed45351e5
SHA2564208080593b17bf21d258c8210f05f676d3d272aa9be953278f37c775ef5b2f6
SHA5129d8c13ed691ffdf85e5461bcdec6de84e91840da50a38e82f88c0aa03dfcd9ee47a119dfe4d57a9afc20effe5ed9d4495ac7d3bd73f8e24df29e7940817a7159