Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
26/01/2024, 17:30
General
-
Target
2024-01-26_71778b61099a860fddd1e80ad15e9cf6_mafia.exe
-
Size
468KB
-
MD5
71778b61099a860fddd1e80ad15e9cf6
-
SHA1
481447e418f10d61a5219370d517abe987ebac16
-
SHA256
0e1f9fbd323345f708c31ca983a9777778efdc194f605b13b4f228e91921ee74
-
SHA512
0284e8d7398849f98cf8aff5292c1782ba0e795f489ccc15476c8a2c5614bd29c2964a8ce9191c1a36cdae645bd71d73da5e1ffb0482b9f007fd61fb7b39e785
-
SSDEEP
12288:qO4rfItL8HGcJB4NH0vMq1c/ZUzq6f1u5d7bWmeEVGL:qO4rQtGGcHSQjq169sumeEVGL
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-26_71778b61099a860fddd1e80ad15e9cf6_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-26_71778b61099a860fddd1e80ad15e9cf6_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\54D4.tmp"C:\Users\Admin\AppData\Local\Temp\54D4.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-26_71778b61099a860fddd1e80ad15e9cf6_mafia.exe 6C9B57D5F6E5D1795C7153C7F9AE6BA71E5B4BCEFBA94A5CF15FDF64260F37CEF47C3993F7DE3DB08ACA77C6DFBA8BEC97052AB4CDB52DA16CFF449DB10009242⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
468KB
MD552acd8ade0985f5f9638e8ef8db70f22
SHA1f6816338ca1a5d1a8988ec2dcf5bc62ff7083c90
SHA2564a426ba15d2df71ab6e674559a6b7842763ddc6cb676b542134152e0a78a21fe
SHA5124d75fc4902ac0ddc3aa730529575c0624572379d8819f22f02e25f18b71cac908f28c65134ac34bc7736791c6314a673c6772ae08e21a8d92313ed6bdb0d8e80