Analysis
-
max time kernel
91s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
01/02/2024, 20:30
General
-
Target
2024-02-01_38c981d65c6d0cb8c39db114188d8345_mafia.exe
-
Size
486KB
-
MD5
38c981d65c6d0cb8c39db114188d8345
-
SHA1
75aa0b61fedf76f9a019a35d5c20ba7369e398c1
-
SHA256
d558303a50e997804d66dbda00630c78d0c0e6e30d4511f089cc21adf64cfed2
-
SHA512
62448e95b953e873ca617454d34df12d114dd980302729766a7d7248c7ab566ff5742480b30ff381721a004b6fc14930f5e19d3c93f8905be34a6d51171d9c98
-
SSDEEP
12288:3O4rfItL8HPuxdwhKVuU2a0vnxKrCA+JwQA7rKxUYXhW:3O4rQtGP3KVMvorCvwT3KxUYXhW
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-01_38c981d65c6d0cb8c39db114188d8345_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-01_38c981d65c6d0cb8c39db114188d8345_mafia.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\50FE.tmp"C:\Users\Admin\AppData\Local\Temp\50FE.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-01_38c981d65c6d0cb8c39db114188d8345_mafia.exe 26EAD708ACFA8F1F03536C17C78CA10EEC948843E61CF0681FC3F5D73F510493256DF152A0F790D17CA10D3D89B56F445E08E6CF657B89574952590D9CFF58FE2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
486KB
MD5b78b62594e62645e3e71b98b22b1071b
SHA136febfd4ff8e8227059575a3cf943aa3e6909857
SHA256e9be337fa3ce5bd349ecdb52cc1a12a68fd5a0ffe894c2a0d491ebc4429a845a
SHA5121d7610f94352eaa657a294a3a4d851f01076f81fd152d599abf1de34058f5aae90945fc9799b411e0329223af5e64a535c819ca4097578210c99ea7d981ae665