Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
26-01-2024 16:27
General
-
Target
2024-01-26_86ad2de3b19e9c6ab336e031ec7113a7_mafia.exe
-
Size
433KB
-
MD5
86ad2de3b19e9c6ab336e031ec7113a7
-
SHA1
86fa3450f6fa311da805d0552352e6814c90b7c8
-
SHA256
ce5e065ca2b2697e6b78b9a0ba3964496d8e5372036668c447d9d46511bf54a2
-
SHA512
1b29d72e563f9f5c0f03defc49d4a3b5268b6e060c9bd4d85bc56d1218e9393b2ef515aa6297e53dacb7622a9d23ccbfc09f5b418e222fbaaa1c40156f55939d
-
SSDEEP
12288:Ci4g+yU+0pAiv+fSqP1PdVnUrEDj5w2y4kPn:Ci4gXn0pD+3jUrsazv
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-26_86ad2de3b19e9c6ab336e031ec7113a7_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-26_86ad2de3b19e9c6ab336e031ec7113a7_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\3EC5.tmp"C:\Users\Admin\AppData\Local\Temp\3EC5.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-26_86ad2de3b19e9c6ab336e031ec7113a7_mafia.exe C2F32A84021831E67EF61D651F68D09819B22EF660D462C5F7AC28C4551954FBCFFD6D92B05825A86093250EBEC4DAEC8C819DC59D2F4566FE90C7835CF671112⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
433KB
MD52eadf4ae121ac40261baebd85d274087
SHA1d362630a014881e61027614e0f3f5e8587212910
SHA25672577858c7731509007b965ee5bcaeb3ba6d942b243f8eca34dd579df5f403e6
SHA51260d7300b37b8c428a070fe0656bb97108b6e527834289af382e67b676b592f86f0c8212637d6142ffc906fec9b47839a4c6a89ee47ea77091ebeac3898d5fb48