Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
04-02-2024 09:50
General
-
Target
2024-02-04_a05a669945a55f6bdb767a7bc4433b5f_mafia.exe
-
Size
444KB
-
MD5
a05a669945a55f6bdb767a7bc4433b5f
-
SHA1
dad066fc441fc67cdcb6d8bb0765a06d79b5b9f6
-
SHA256
510f99a98f9a56ccafcfa48e1d4e6f8c1f3721f1f2ac1f21104632a5e11b4968
-
SHA512
4d2189f43ab13b743f381cad260b5e1137fbcbeb4b2ed140735b83aee4cc6ee33a6b2798f4f00bdaab2a8e6c4e1d502d174b0381744366a7c879784bbf667d87
-
SSDEEP
12288:Nb4bZudi79L0a9etbLZh0HXXZE857w6oKZtQVcA:Nb4bcdkL0BOXXZEYsie
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-04_a05a669945a55f6bdb767a7bc4433b5f_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-04_a05a669945a55f6bdb767a7bc4433b5f_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\404B.tmp"C:\Users\Admin\AppData\Local\Temp\404B.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-04_a05a669945a55f6bdb767a7bc4433b5f_mafia.exe 00A71450E862E4F9C334D0E5C84437369C22DFD5F54C28873CE799A4A3D8EDBE570ED420E83F05F5E35D6E59A334272A36479364C26A2B91D14288F4FF9FC1D32⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
444KB
MD57b8a099f7556e636d9a35ac69bd1ed7b
SHA11bcc8de55ecbc00cc4d57543c52795e8c2efcd4d
SHA256a33a459e977c92d41b495cd66911a82e7c1c1d6f1404cda7b3d08b18aeaabbc1
SHA51201037ea7fc8bdf2168a5edfc845538a9b3a7f6c4bb3f6e84436ee47dc365e2788d4ba290c010dc62d3dfc9e9339306e325f2c4ee2dd64c1ee359d23adec09d48