Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
17/02/2024, 12:26
General
-
Target
2024-02-17_1bebfa5cea631f42c68350aff2e376d6_mafia.exe
-
Size
435KB
-
MD5
1bebfa5cea631f42c68350aff2e376d6
-
SHA1
367e7ced763a467f3cc2ee2cfa416a54d160943e
-
SHA256
3c4c994d2d44008cbd15bd1ad43d581c064c8697feaf2f12805cc90fe5a9d770
-
SHA512
69628c19e62892ff0915c54d4e52df219d13efe890c1cbd689aec61fbae63dffc0fdc82902585679e43815836f33415bcc2ee0ac92174b2a42e071d2d0c0e7e5
-
SSDEEP
12288:9W4ufepiqKQ1mzD8PxY1FfQprn8Q+yeSNJ:9W4ufepiqhmP8PxYot8xyeSN
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-17_1bebfa5cea631f42c68350aff2e376d6_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-17_1bebfa5cea631f42c68350aff2e376d6_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\5F6E.tmp"C:\Users\Admin\AppData\Local\Temp\5F6E.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-17_1bebfa5cea631f42c68350aff2e376d6_mafia.exe 11BB0431EDE7AD0AEBC0925DA2387AE05972FD84319916ADADE85A8387D4BA2A2847CA0916943CFE23D94FCE20E258503A03E5DC8D7841115351F4AFA6A3B93F2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
435KB
MD522851cab3896b913f10c5ecbc64b8726
SHA16e4a033e9340fb36c63e5896fbbab310c6628af2
SHA2565228ff8700f831567ee4341025a2d80e6f811755c2b2c33e15a3e91bc9c4e59a
SHA51287a4934d4965036f8754096af0e7bfd65dd70cb7ec96de1898e751a0eceb9533ba6b2289d9d017ebfaa536aa6379106742f522457bf20b1dff751c84da5ccd55