Overview

overview

7

Static

static

3

2024-02-13...ia.exe

windows7-x64

7

2024-02-13...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13/02/2024, 20:29

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-13_57de285548203ccc7caea48f651343a9_mafia.exe

  • Size

    468KB

  • MD5

    57de285548203ccc7caea48f651343a9

  • SHA1

    2b4f05a2977aa2edeccfc818e5123a702db468a3

  • SHA256

    779adb871695c4a3ef35a7e6e03ec1e750b34b8e8018cded2d175f0f457deff2

  • SHA512

    fc9d47c5cd9acfe509e1d9b5718c5ca65c336b463033dacac192da0ad1a057aadd1826644fb0176cf09b8791fd600a2eefe2d2da327a1c881bea2f9bb0b07b63

  • SSDEEP

    12288:qO4rfItL8HGwKlR09ctahHan93bCXBeL7bWmeEVGL:qO4rQtGG89cUMR+R6umeEVGL

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-13_57de285548203ccc7caea48f651343a9_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-13_57de285548203ccc7caea48f651343a9_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2652
    • C:\Users\Admin\AppData\Local\Temp\45A8.tmp
      "C:\Users\Admin\AppData\Local\Temp\45A8.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-13_57de285548203ccc7caea48f651343a9_mafia.exe 81722912F4C5908A71C97E10185ED2BB8BE12D876609D48F0DA04742D8018E3E1703BDC1565DFC2FAF36E93678740AF15583D6DD35BA5325557177264DEF0BEF
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2840

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\45A8.tmp
          Filesize

          468KB

          MD5

          bb1dc4bd6c83a32f93f9c54126f93ca8

          SHA1

          7cb58b4621ed31d1d20357ad999be6da16ea0991

          SHA256

          a1c9cbc29b1a4e69f9d1586947e828ae778d24f7e33f6da4b3af98df27e1ec0d

          SHA512

          33b1b7996a9261fb9f4e356d0fec51da26e681f490e9e32c65a0ef9d664413bbf780accf312ce6e5264688d5d9ac12a12e47e112c738f020ddd2503892bdd0e1

          Download Submit