Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
27/01/2024, 17:38
General
-
Target
2024-01-27_f19cc24b72ba8fa8222d2ac4b0a2b8d5_mafia.exe
-
Size
433KB
-
MD5
f19cc24b72ba8fa8222d2ac4b0a2b8d5
-
SHA1
3124a6ed1f43a50de1997bc8986032e653f5777f
-
SHA256
1870438b84290ea0bc48c94951cced99fe380c0a3d5d86d812b5389683940285
-
SHA512
9192006193cc9ef0c8d017982c0f0856f9efb8f9d3113f15ce0ec5797efe87ef62ec56df7c21e79fc9c4d4e97c55a91643347c4302f0a90295252b72006be05c
-
SSDEEP
12288:Ci4g+yU+0pAiv+uzvMDFfuAstuF7XCMzon:Ci4gXn0pD+uGFfuAstuF+MzY
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-27_f19cc24b72ba8fa8222d2ac4b0a2b8d5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-27_f19cc24b72ba8fa8222d2ac4b0a2b8d5_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\4E4F.tmp"C:\Users\Admin\AppData\Local\Temp\4E4F.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-27_f19cc24b72ba8fa8222d2ac4b0a2b8d5_mafia.exe FFA853075CE30AA8FECD3D1FA75E437898A82C26E7C28129FC443807910BEA96B26F5BC766835C5F6D3026CCE0D2DED6C267AFE16AB6F425773394CCDAD019302⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
433KB
MD5cad591a8e3852ec2d359a5e7d3c9a791
SHA1fb02367b9779cc6b6df092028ff2b5a453b7c039
SHA2569390232ecb6bc5077a9a270ce1f68cba8af547f2c61b504d96c593839b32af9a
SHA5127ca330ff13c6cc518d9954ad0e3a7d760c233cb1a04aa51d1ed41770172e287ffece9d8a9c0cea57518d35f457ac697640e65d81d56a6669b8882e0d97b91b9e