Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
25-01-2024 17:29
General
-
Target
2024-01-25_6018e11431f1a82ee389a6780dceabc3_mafia.exe
-
Size
486KB
-
MD5
6018e11431f1a82ee389a6780dceabc3
-
SHA1
424dcd038c8ea25f8928b5f5b1f2256351f31523
-
SHA256
5640ab46f0603910176307bd52d826bc08f84b6d2b3ef3dc4bcd2f605025102c
-
SHA512
aad2d71af716f6734975caef4c469c9aa935a739cf43abb5962f946b7075a9cdd89599f0d4208f172c5078bff15fed7dcaef45071d4f9592b3400ec9f2f566f4
-
SSDEEP
12288:3O4rfItL8HPd3iXL2AoanUIao9EcqX7rKxUYXhW:3O4rQtGPdyaTanUno9EcqX3KxUYXhW
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-25_6018e11431f1a82ee389a6780dceabc3_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-25_6018e11431f1a82ee389a6780dceabc3_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\8382.tmp"C:\Users\Admin\AppData\Local\Temp\8382.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-25_6018e11431f1a82ee389a6780dceabc3_mafia.exe 09A8A418833C252E5DF1D050326DF11DD6F364AFA8D4DDBCB1953371C68C7C2A4D92E60EB907C7A7F70AE253F4B27E6DBECB6BA80CBF5C500D835EAB685C6ADC2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
486KB
MD506bc15691962da5d283c46488461e389
SHA18ef80df640c856846d510e2c04619fc96bfd477c
SHA256b553dc9727a5724458e72b017f06cc8a0e4c0abd436ad660059f5e5e6036e11a
SHA5127ba39ed8007270132557e1a34fba693ade099023db090896213292086127ec1ba303277694d44ed411d460129cfb3095988ea360b96bad228775d34ff93cd94a