Overview

overview

7

Static

static

3

2024-02-13...ia.exe

windows7-x64

7

2024-02-13...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13/02/2024, 14:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-13_059dad4c88fa63c138c31f236ebfb15d_mafia.exe

  • Size

    486KB

  • MD5

    059dad4c88fa63c138c31f236ebfb15d

  • SHA1

    9d19c9ecf57072943f6c8e9c3cd31fa3c87beb2d

  • SHA256

    d9cd9ffe5c17ec4e9dc73f7d8225188bfc86dbb1bef3c988330c719a9edca34e

  • SHA512

    72af93d66697cf36512bc4e78784dd5fdc36714f7ba0ff8fe26c30281f26299c7a2ebeffbb937b6896f5dbef099d238153bdc1d15282cea0ed7e29ddcb96e1eb

  • SSDEEP

    12288:3O4rfItL8HPrgdon6cg0bQD8E7s+58OjG7rKxUYXhW:3O4rQtGP8dq6Ycp5763KxUYXhW

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-13_059dad4c88fa63c138c31f236ebfb15d_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-13_059dad4c88fa63c138c31f236ebfb15d_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2424
    • C:\Users\Admin\AppData\Local\Temp\62F7.tmp
      "C:\Users\Admin\AppData\Local\Temp\62F7.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-13_059dad4c88fa63c138c31f236ebfb15d_mafia.exe 6085DEF64F54338BD5B88C6FFD2F72264863068152ABDE5F5EE2936FA1F5ACF4A8ACF06209C4CEC8B84ACB74BC26720E4A162E83F304CB24438228E356B90085
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2736

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\62F7.tmp
          Filesize

          486KB

          MD5

          9d74724a8a6b191b6697a91b304abb76

          SHA1

          a14d6f0ddcb092bd103d624f1df348ba7a565305

          SHA256

          5e95757e8df540988f60e1a383a5a94c7d73490301a406f7b2a8123e179ad6d7

          SHA512

          88b68a81a0f2ed8b4a6fd9b821f52d303d2a62807b7416a5e67702bdfbabe97ed9e936404d2e61217fe40b9059ce968e7acab41931636a24d20a3a112a7d267d

          Download Submit