Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
18/02/2024, 10:47
General
-
Target
2024-02-18_e5742338de3f2a63a88cc5972d89d3d5_mafia.exe
-
Size
468KB
-
MD5
e5742338de3f2a63a88cc5972d89d3d5
-
SHA1
45d38fedc5605c48ca62fa40e8d5d6e130a5b657
-
SHA256
e0372df4acb06b17d0f88f30b88ce4cbd543f1f9461e9022a2263efc6fd13376
-
SHA512
b2988449bb14dfc5ccf6933374cd0390caf4b496cf5c01cf87277f1b0c2d338cee56c552bb0189c07b5166558fae4a9c4c32653a5bf4db967a0b6668e125b6c7
-
SSDEEP
12288:qO4rfItL8HG1b3krQ0ICT+/dL86dYrRNL7bWmeEVGL:qO4rQtGG1b3k/sdLDG7LumeEVGL
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-18_e5742338de3f2a63a88cc5972d89d3d5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-18_e5742338de3f2a63a88cc5972d89d3d5_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\63C2.tmp"C:\Users\Admin\AppData\Local\Temp\63C2.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-18_e5742338de3f2a63a88cc5972d89d3d5_mafia.exe 8D4D166F388B99A17DCB6406C3B72AC61E8F659B11D7CB4C76FA74369F333ED94ABE50586B7706F126D3EF9FC36A1025640AA883E55BCD6C1EC9EEFBEC6141D32⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
468KB
MD50b9f10d4c210087842fded15595a45ae
SHA1f7ac294c5c96633fecb37045f71f12cc4f68c3d3
SHA256ed17327b499ad1d6063bef5ea8fdfe7bc86a2b061652bc60d1cf845e22487481
SHA51200502870f22fb81edb06b31eee6c078b1535324140b63e20762640f94cb309bd39ca4af37f3c2f6eac78cdd6a87650740ca8dbc07f7da3a3e253f9b01744b12a