Analysis
-
max time kernel
117s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
12-02-2024 18:30
General
-
Target
2024-02-12_d8d1dcb758ccd9175143a5b95316b953_mafia.exe
-
Size
414KB
-
MD5
d8d1dcb758ccd9175143a5b95316b953
-
SHA1
d30a11a544c6d608345c943989a1226b1a3b7550
-
SHA256
cf2a2a628d905213e6e1084011d87f093989ecc992d16f19c2b3c13bb964a62e
-
SHA512
7f1f872f49409e21692f479cb3862a6a4226f16d79fc70a421f1cf80287f2baa3409ff6a14afaeb672f84ee1fbd799169b7eae862ab8f1cfce11fd0d11742c68
-
SSDEEP
12288:Wq4w/ekieZgU6Vr10X4UwAYPnHTRcvA+Dlx:Wq4w/ekieH6oYPnzC4+Dr
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-12_d8d1dcb758ccd9175143a5b95316b953_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-12_d8d1dcb758ccd9175143a5b95316b953_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\369A.tmp"C:\Users\Admin\AppData\Local\Temp\369A.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-12_d8d1dcb758ccd9175143a5b95316b953_mafia.exe 61DFCBD03C9A8FCBE5A7FBA0F2E2D8D9487C80B0AD885A0EDCD3838104DCF248AD2FA42C8B694D257AA26AAB799AB07A0130232DD75A3B5D403AB27B7B840A5A2⤵
- Deletes itself
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
414KB
MD57d233664bd2720aab42cf8442f05b0e9
SHA128901a82c8b4161dc4219141c8c112c2d6ba2e10
SHA2564a87f3743fc8be917b50e28fc3f6e1977cb46d2245641cb624e8d802cdf95d71
SHA5124cb9cca9774ee66592c64075355c356b7d741f64b25d60965791b87e3c81e42e97ac3763943591bd71c7faafefb5f0fbc0d4caa7ef4b692c6db452718b674426