Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
12-02-2024 17:44
General
-
Target
2024-02-12_9bd20fff8459fa4f834e027a77d0fbd5_mafia.exe
-
Size
384KB
-
MD5
9bd20fff8459fa4f834e027a77d0fbd5
-
SHA1
3687a8a8d55d825848be8ad10049f419d9af763b
-
SHA256
997951f52d42025a6e972c45b5ee0c4dd5b6a027e4a7ad65f85a3a755f88cd16
-
SHA512
ffcf5a9c92c15040eb09afd9aac856dc5e5a1eec7f9be2a7752960394bf183d27f0e3fb01dc99a050ffde6665bed0bd4afe1fe816cdf022d5d80d0b709893af6
-
SSDEEP
6144:drxfv4co9ZL3GBGgjODxbf7hHrk/t37CSpxL9rV8VCnwKoXkYhoT3ezZ5UNZ:Zm48gODxbzS/trpxLVlwplG6V5UNZ
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-12_9bd20fff8459fa4f834e027a77d0fbd5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-12_9bd20fff8459fa4f834e027a77d0fbd5_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\7D4B.tmp"C:\Users\Admin\AppData\Local\Temp\7D4B.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-02-12_9bd20fff8459fa4f834e027a77d0fbd5_mafia.exe 2A9AFE5DF15A866B1964D06633A0CC92F554CFE56099BFFD906905F01E6F8858F2713D91E5417E1E24773541448C55CCE1332A1922FDD2729FA82D27157429622⤵
- Deletes itself
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
MD5d4bf759ce12a9aea56ccce3f1db8cc94
SHA1db5282ce40708b0f8b120418ff77ea6759917eea
SHA2568ec5ade778fbeeda5f10424d080adf82288ed15b68c049d4df1fb47296316d65
SHA51235a26173121abc8051b8af2fdac91b542ba768e965280169cb775652325ea36359f09658f25a4f339e136d23ef79683440355caba00bed82da464dcfc85d1f5d