Overview

overview

7

Static

static

3

2024-02-12...ia.exe

windows7-x64

7

2024-02-12...ia.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-12_726e6f4392c734a851072879ce96f51e_mafia

  • Size

    465KB

  • Sample

    240212-ysqxrabd6x

  • MD5

    726e6f4392c734a851072879ce96f51e

  • SHA1

    1e52cc66f7d863033b717cc71f79e29e88ca9a12

  • SHA256

    5d1f33fe1b85ef078fe511dafe2ab9da0e73dc0864c769bf3d142e809c0ab183

  • SHA512

    360a745c43c28b019f9252f0e57ed8e826b38968e17343964abd832c08ae8b4bb2b4b340412ba926dfb81b0baeddb6f502a3910e6d1c70feb45445b171543888

  • SSDEEP

    12288:Bb4bZudi79LDJzG7ydK/CA2SuPbfdMQ/bDA:Bb4bcdkL1r8N2SuPeQ/

Score
7/10

Malware Config

Targets

    • Target

      2024-02-12_726e6f4392c734a851072879ce96f51e_mafia

    • Size

      465KB

    • MD5

      726e6f4392c734a851072879ce96f51e

    • SHA1

      1e52cc66f7d863033b717cc71f79e29e88ca9a12

    • SHA256

      5d1f33fe1b85ef078fe511dafe2ab9da0e73dc0864c769bf3d142e809c0ab183

    • SHA512

      360a745c43c28b019f9252f0e57ed8e826b38968e17343964abd832c08ae8b4bb2b4b340412ba926dfb81b0baeddb6f502a3910e6d1c70feb45445b171543888

    • SSDEEP

      12288:Bb4bZudi79LDJzG7ydK/CA2SuPbfdMQ/bDA:Bb4bcdkL1r8N2SuPeQ/

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

3
T1012

System Information Discovery

4
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks