Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
28-01-2024 14:41
General
-
Target
2024-01-28_cbddbd974813b182ecfaf0c9711dc14e_mafia.exe
-
Size
428KB
-
MD5
cbddbd974813b182ecfaf0c9711dc14e
-
SHA1
12e019e6096584c7d3fda15fc09470550d17a0bd
-
SHA256
c394d58d7e6b189aa3028fc4e4d23facfdcc09633cc4b112376b0c1e8ddcbb8b
-
SHA512
f12c10af8b23dceef6fae7f8fd575c9b637959c97f3d476c2fbda025bc7635ad7dc44a12bd96c2e3e2531b1efa508c33b92a9020badbb635da5e1c5111786bd1
-
SSDEEP
12288:Z594+AcL4tBekiuKzErHIZQDBGUB6cU1sWUsska/Rhl:BL4tBekiuVrHJq11On
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-28_cbddbd974813b182ecfaf0c9711dc14e_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-28_cbddbd974813b182ecfaf0c9711dc14e_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\1D41.tmp"C:\Users\Admin\AppData\Local\Temp\1D41.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-28_cbddbd974813b182ecfaf0c9711dc14e_mafia.exe 34025D4C48EF9E88D04F78DC30C07A986161ABF31AFCE71126E48AF9C32039C7E77CA0CE6BFF355F046512F70F6FC2DB5949968D204AF88083603275EBBC35822⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
428KB
MD5334e7571fb3b9ffaad2ad351055600f1
SHA16a21387c54a2024774218bd84fe2dcb9c17987d5
SHA25662bac0aaca9c2f4339756ed438f10b94f9b781309fbffcf38c07b821c33fce33
SHA512d318dca0d3f124315644dc839e6ce2ff52dee6d52c4c7dc47d6e08df855742d396c1cc8016cbe86a29838c899cb1999521f246b9f90115732a393277ad46680f