Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
03/02/2024, 13:37
General
-
Target
2024-02-03_d82204f8b46fb700fe8f5a34a8b36f17_mafia.exe
-
Size
414KB
-
MD5
d82204f8b46fb700fe8f5a34a8b36f17
-
SHA1
355841d9bf780c19d2bd788a188bdfa988696df4
-
SHA256
cda601c19518e6bc73f73188448512f4dff3079978fc3e8c4467447f3d03677e
-
SHA512
da12f1d10a2845d9650c7e3ddade5866bc8ccaaee4c389957a94475a9d49bca02c8e56afb960c8c146601f71eac5b04290c6d993f62cdc06bd7a129f7206d590
-
SSDEEP
12288:Wq4w/ekieZgU6L4gKETaPyIFDe31+PMl:Wq4w/ekieH6LLFQTde31+PM
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-03_d82204f8b46fb700fe8f5a34a8b36f17_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-03_d82204f8b46fb700fe8f5a34a8b36f17_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\CEC.tmp"C:\Users\Admin\AppData\Local\Temp\CEC.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-03_d82204f8b46fb700fe8f5a34a8b36f17_mafia.exe 3F82EE25289BB3DA924714802FB48A0CD5C09CCBCC3084962C7E740FCD259D14FB698851D0561609F98D913592FACA44D981933C639073F1638193EFD4EB26AE2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
414KB
MD5ba27bb6466a9e7c618d8e2c3bd2ad66c
SHA10259baac271456a473048f2b33a7778a44fe1c11
SHA25689c8719818f3a9f4a9de6f6c5acda246e8ff10a7a133bb95c27fd279218cc106
SHA51278fa4645ffc41cc1fb38a06873018bbbfc96b23aa10b9348a8087f08b6882e9c244a3eb5a2e3a3b19ba688a6aca93af8f1285b4dd2c128ee88efa438d3c7f9a7