Overview

overview

7

Static

static

3

2024-02-04...ia.exe

windows7-x64

7

2024-02-04...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 09:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-04_4dbeea6d116a8664876640697c9627ca_mafia.exe

  • Size

    468KB

  • MD5

    4dbeea6d116a8664876640697c9627ca

  • SHA1

    9a0dddc477bc2139c70595f13226266812ea35f9

  • SHA256

    72676cc9291552132c5d3581e436d5be4fcc33dec8680c476a7214e35480c5bc

  • SHA512

    8e98e04c1b91593a99360645cdfdd1655878b460fda9b343085c1be05c25ef3b478e0f7f76a630a8238f087fad26ba9cfe0dd7f076047c7eb0dff10119a22df1

  • SSDEEP

    12288:qO4rfItL8HGWEMGMxKQd6RuQSr7bWmeEVGL:qO4rQtGGNSxKqQSrumeEVGL

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-04_4dbeea6d116a8664876640697c9627ca_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-04_4dbeea6d116a8664876640697c9627ca_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2124
    • C:\Users\Admin\AppData\Local\Temp\7649.tmp
      "C:\Users\Admin\AppData\Local\Temp\7649.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-04_4dbeea6d116a8664876640697c9627ca_mafia.exe 467B133F3B5381BCA917D2FB119564C136A14AF28813F8191D577C87C889EEEC900B4C84BBB83E5E718BA48764F3A77BAD7AB0B4838690E3C2D3D9DEFE5C4F1F
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2892

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\7649.tmp
          Filesize

          468KB

          MD5

          fd8caec932608b65fbed58187b65e442

          SHA1

          38c08652804f147ae8ae14b075cb470a1f561a1a

          SHA256

          5c5f587c91a491678111017586522dc35d84d004bafae026ceaf4fc7ae801be9

          SHA512

          bfd26318ee31c3a06a4f802e8a358d71866cd694a990de34e895f1cb88e214443f8b8237ff010829fe8e4425a8fb2f6aab74c28115c35cb0545f4db19495a8e1

          Download Submit