Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
14/02/2024, 07:06
General
-
Target
2024-02-14_b757203b1451cb834c81ebf19f236b16_mafia.exe
-
Size
384KB
-
MD5
b757203b1451cb834c81ebf19f236b16
-
SHA1
b6fea9ff17527182985f589d0d235ae37ad5026a
-
SHA256
daf6acfaa864a9fe926462e4be9fa6cdea18d0d239f7f5f385966cea201d70f5
-
SHA512
3217bab10c8e4b920272a0af0f35191f852ed48f9de7412fabd4ecda26d462b08d04a871cde1a166e309d0ac059015a5a07b0816ea43f2a2db81f4c664c9c542
-
SSDEEP
6144:drxfv4co9ZL3GBGgjODxbf7hHhuMaB1KIgg/kgbh4ZJ3uvmZ:Zm48gODxbz5ablgTeyR9Z
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-14_b757203b1451cb834c81ebf19f236b16_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-14_b757203b1451cb834c81ebf19f236b16_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2137.tmp"C:\Users\Admin\AppData\Local\Temp\2137.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-02-14_b757203b1451cb834c81ebf19f236b16_mafia.exe 0819B27CB498D8DE8A1064E8763198B51D38BF023578366575C1180C1FFB37BF363388B09D12D0C788B58C6E56F91E1D0491CB1E7F8E9FD795B51095C6CBBE4F2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
MD5458a873919e90e867025e56dd8aaf013
SHA1442356a0a219a2213c462a4f8599d61d65fd711c
SHA256fc599fab32b8ba919993d252e876a2307297fd2750ce80f328333ff9a703334a
SHA512c8e9661024464fc8304086c0bdc2d29399de4a9cdaee261d7dff41fb95a90a6b3060d98020dbbc94569235684245e153d94662725dea6ee9a27f90c918886926