Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
28-01-2024 14:41
General
-
Target
2024-01-28_9525bb8dcd76d3752667ccb33c8a13eb_mafia.exe
-
Size
428KB
-
MD5
9525bb8dcd76d3752667ccb33c8a13eb
-
SHA1
8442797c1b804dc88e003e2616bae4a0f98a5733
-
SHA256
3585b8de61ddaa402f67eb499e7ea30cb73debc223cfcff891802c604e9e1ec7
-
SHA512
4f9c74fd7f9a5c8b697686f2c4a6c100201571a2207ddb5446bbca1c8c2c8b007e2adde29ac3d63e6d7723ea901523f38c8573c1b8246e5131b5c62f61c199ee
-
SSDEEP
12288:gZLolhNVyEycmqkn/EFvVJcB7aURDsqHR:gZqhOEoLEUaUR3
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-28_9525bb8dcd76d3752667ccb33c8a13eb_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-28_9525bb8dcd76d3752667ccb33c8a13eb_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\5467.tmp"C:\Users\Admin\AppData\Local\Temp\5467.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-01-28_9525bb8dcd76d3752667ccb33c8a13eb_mafia.exe AEC99A9AC872119D227946B019FA74CF6A01198AECBE5F672E2C1823ABD31158CC907FFD0394D055DD169D377AD89AFDFCCCFC6B4C92097F7668774EBB0EFA4F2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
428KB
MD56a5c813a83bb0b97e1e73edad00d16f7
SHA1b7674cfdd55c47fa1a47fa79cd7cc3c6296fad21
SHA25624c1fd62cf1afdc865536ff1a1e64001ee39c4e77f4005cf7b8bcc3245c68f28
SHA512f057bf09b2319d4f07a9d0b2b051f5fa77d1e7cc0c3314d687266ddd1dd65ead0505de59b38ea62fc4014558fbbaa9ea75bacd7c7e9751e8510e661703085efc