Analysis
-
max time kernel
117s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
26-01-2024 12:26
General
-
Target
2024-01-26_3cb74e76f8b0b548ddbdd7c7360edf31_mafia.exe
-
Size
433KB
-
MD5
3cb74e76f8b0b548ddbdd7c7360edf31
-
SHA1
a400e8b62abd7f3a8cbdb856b7892c0dc493519b
-
SHA256
764cf0ed13e7945dc2a7e982d82fec303a6e6acd79caaa7e8adfb647584be281
-
SHA512
7d95eb7a8b7a3a0ae2f6734015a1bf850e011134bb2998950c145b9187d7e9b4210095517be051fc16cf91fb49e9b0c8319da36ea131c54ba0ddd177e92d72f1
-
SSDEEP
6144:Cajdz4sTdDyyqiOXpOd0p6Jiv+vtvuFc56tQNxpaQ2sT8W+BNP1+Wr+AS43xitn:Ci4g+yU+0pAiv+xYsN+XN+BEktn
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-26_3cb74e76f8b0b548ddbdd7c7360edf31_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-26_3cb74e76f8b0b548ddbdd7c7360edf31_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\3208.tmp"C:\Users\Admin\AppData\Local\Temp\3208.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-26_3cb74e76f8b0b548ddbdd7c7360edf31_mafia.exe 38044DD4D8E487AEF1F92579F4B74E1A707A601D8088CC0A8EE5F379346EC93EC8878A61167AB3EDBD3914A303DE59CADD5EADBEA720D1CF47270992078741E82⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
433KB
MD589938c6c5290530b21a9dbb535673c20
SHA19ce03d744c9e3e3b47425744da24837a4731bce4
SHA25692c7a28599d338f616d6922c87600a9cd51725af5c42ec0f8b24c6abcafae178
SHA51225ba0b64bee17893b6161007285de2e45ef5419b7b12d6803f512174ed27f532456848560a73404c800ab92d384d641539e629c582ff5ded91845ae2da40fcae