Analysis
-
max time kernel
118s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
03-02-2024 23:25
General
-
Target
2024-02-03_3e421927e8dd96f8ba869b31e7fbdc65_mafia.exe
-
Size
479KB
-
MD5
3e421927e8dd96f8ba869b31e7fbdc65
-
SHA1
f05c1cc1e72fe9fec058b34a1791f2bd34505978
-
SHA256
894f756e3d1669a5c3d6f9a58a4c75f2e11fb0f1028c8d934c1500d2de9854d9
-
SHA512
0288ec4a90f72809152f9e28a55766734a0f04825322d5479e1d64fe96e21e70621e623d830d75ff0e6c6abb03fefaf06af0f86c2524796f3e752d5a44cfa7ba
-
SSDEEP
12288:bO4rfItL8HAe/Gyy96oDao/xXhjaAr75UO:bO4rQtGAe/GR6IZXRXVUO
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-03_3e421927e8dd96f8ba869b31e7fbdc65_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-03_3e421927e8dd96f8ba869b31e7fbdc65_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\6F37.tmp"C:\Users\Admin\AppData\Local\Temp\6F37.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-03_3e421927e8dd96f8ba869b31e7fbdc65_mafia.exe 972A36A11FE4B60F39C75C04E2EA87CBA369EF00E4EC6CB80C0413C191EA37658F34DE73F5A0C98EE3D7B5CBC7AB930C012DB6B03A658829214DAB07A7A498282⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
479KB
MD54d2eb664afd1823d9eb4ae535b94df4e
SHA1e41073178e9937afa86a4540e681ca4b5dd854f9
SHA256f9be74532c2677a3746c88a41d46da84bb00f5dbb66d991c99a538caa748521d
SHA512ff0d1bcbda565bda60ed3327201be8b51ea8efdb1dd8b46980503fc24a51b8ff819c3ffce1d2421e4db28581efbc339b1648a333d791f585ffdf8dd4300421fb