Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
26/01/2024, 08:26
General
-
Target
2024-01-26_5d6757988a69991efec8b19240fbbd18_mafia.exe
-
Size
443KB
-
MD5
5d6757988a69991efec8b19240fbbd18
-
SHA1
535ac67f7256c29f3050145c232372b1ed8b0c2a
-
SHA256
9c907b2ae3d5ed711452d94be7843974b0a011bfcbd80f2ebe666379bf3f3638
-
SHA512
e0533d54bd0284612041fb90b79557002dd04f604d7bf23b8c12961a41d8cb16e0d2b992c4f0f60f712e25986a4bcf3cbfbbddf3ef688f7c0dfe124c45b61165
-
SSDEEP
12288:Wq4w/ekieZgU6K9+dddB8d5bDGHiTdlRFGgxElMa:Wq4w/ekieH6K9u8jbqCJlGgaP
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-26_5d6757988a69991efec8b19240fbbd18_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-26_5d6757988a69991efec8b19240fbbd18_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\1101.tmp"C:\Users\Admin\AppData\Local\Temp\1101.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-26_5d6757988a69991efec8b19240fbbd18_mafia.exe 2A736FE43148BA9AA276BAB480B7615D95C1FCFBA038E3B45020D23D9784D9D59D996CC8C792779C727657501E214556CAD18284B019D0BC58317537BE56C0092⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
443KB
MD511bc0363e80b285c6cb12a1a3c8c48fa
SHA12aff064e0b7840fa94d009d30e038f51cee18240
SHA2564d117e83c6f13ed3e929aabc276cb3fb0bd698f0328de20457d779bff3ac47d6
SHA5125fc1b740ff9befa326375ea38188d5efa441b8e375bdfa93ec1feb8427f33f48d58bacdf278a60e40f2c26393c2dbd7cb4cceb300ac5fbc79a4f98ab075316f4