Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
13/02/2024, 22:43
General
-
Target
2024-02-13_cfb86e60905433f8ad2f43df9704507d_mafia.exe
-
Size
384KB
-
MD5
cfb86e60905433f8ad2f43df9704507d
-
SHA1
4a4fd5fd5f2ec359814ae0fc10ccfce691052d8e
-
SHA256
22407e6ba0fc52c666f4cccbed713ec112e06f1d346260720c3dcb1bd5fb494b
-
SHA512
d5775ba0df7c68d1c95bfb7dae487d6877ebd50099fa97355c85a1149fa1fb24c72538fe125c44c4252a87a20b3f3090878bbfe5e3aae52843fbe833adb0363a
-
SSDEEP
6144:drxfv4co9ZL3GBGgjODxbf7hH/np5CfOoeL5EBuDLRdk1JrIZ:Zm48gODxbzB3C/0SkPROJrIZ
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-13_cfb86e60905433f8ad2f43df9704507d_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-13_cfb86e60905433f8ad2f43df9704507d_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\6364.tmp"C:\Users\Admin\AppData\Local\Temp\6364.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-02-13_cfb86e60905433f8ad2f43df9704507d_mafia.exe 12C79A4EAB0EDE8D4304046FE343CED9E4F241BB8BF4E6DF603065F9614CEF3BFCB5E35B23FE688E37C2B0AE469C011B7AF91F9B5F28C473FE084F9018D80D6D2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
MD5bcc639efe1434110b007b1c544b9f550
SHA19a0ec5fbb0a4411cfcce2cee557843168a317d9d
SHA256e48c501bc8d46efe4e2234d36316008407778e119704d0a44f5247c9f14a40d5
SHA512cf790a5e8fbcc36c1ef6e0fb83b7aef8df4b46f4f609c7f6937a4fc4d25370333fddd80b8d61e7460076db33edc1c1133cc2d59e0785703dd635950d1d288ef7