Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
28/01/2024, 20:36
General
-
Target
2024-01-28_b335d7e69420783ebe7054063c7f4ab7_mafia.exe
-
Size
479KB
-
MD5
b335d7e69420783ebe7054063c7f4ab7
-
SHA1
747cc5572ddf17a5499dd7517c4cc16b2108c48a
-
SHA256
aafeb969aec9013a3434de933a62895d16e2e4537ec7f900783420b7f736c6db
-
SHA512
8e293e9766b9c0365dcd8ba45728f7e0693f319088ca529253003826e80e437a97e5ad70c527fd15feaddaab1cb4610004a5a6746e07368006f0ea0ad3b2acf6
-
SSDEEP
12288:bO4rfItL8HAdN+55f695vskR9WRSg+sJ75UO:bO4rQtGAdsK9pNERSyVUO
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-28_b335d7e69420783ebe7054063c7f4ab7_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-28_b335d7e69420783ebe7054063c7f4ab7_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\3F22.tmp"C:\Users\Admin\AppData\Local\Temp\3F22.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-28_b335d7e69420783ebe7054063c7f4ab7_mafia.exe 1AF7C96B45A0932136CE50191532316F31B33D746A2D12910C39C4F863039DE241FDBB3A1F1E509C96447514A3AC54BECE6FC624E2742F9A6C22E4EEC86D0F512⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
479KB
MD5fa6bc7ff739e09b3e603243526f4299c
SHA1b8bdbfea015bba526831664a6a520efc243b6fac
SHA25614c6d751c46232500bd4b4d089e86a0325d9a444100b6cbf03384313ae6ffbe2
SHA51226687059ab06cb5464c0328233d2a47818bf71ea17330ed56bffb657cc065c9dc50bc26b6296ffa219754b00b60ec5aaf70bc4b392d57ecf988dcc1c4e8426c4