Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
18-02-2024 18:28
General
-
Target
2024-02-18_23f39a0c2875710516759be4f22c7832_mafia.exe
-
Size
476KB
-
MD5
23f39a0c2875710516759be4f22c7832
-
SHA1
59938e6850a31e219d3e71e871838dd7cc338316
-
SHA256
b50781ebba57ea094dcfde836dc2aee53d5a4e38ad38cca373f9c4ccf06cebdf
-
SHA512
8966a58788ad074c2e0f11a6b436311371fb9ffcfe5d9294a29f05a00886445b74172a139900dde5443785262c49aa82cef9ff0ecaa5cca902eb94e3ec4d4486
-
SSDEEP
12288:aO4rfItL8HRPWi8lz8eCqUOyyRPtKPr3JZ3S7K9wlsDpVFd:aO4rQtGR4Z8eXy6tKPfS+9wlsDpVFd
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-18_23f39a0c2875710516759be4f22c7832_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-18_23f39a0c2875710516759be4f22c7832_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\498E.tmp"C:\Users\Admin\AppData\Local\Temp\498E.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-18_23f39a0c2875710516759be4f22c7832_mafia.exe 23B91C5D32C73A83312A0465975AB95856371B92E8694D1208C98D24CB30A1DDC53BD828F2F70C45F34082E64D952B237D436EA3F57A675BB6C94D3AF54708D02⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
476KB
MD5b565e09086143eb08a141d885f131c4a
SHA15ae9af05e0087fb75c4c06c25a8bf014112e23cd
SHA256f21bc607ff8350f5da77ff37d18620938f004b16af859ea95e549fc4ad4ae01b
SHA512b17d40331055da6e06775ddfb1fcd26d98e1a06e89ecf25099234d2951c5e5a11b9c884586963473c590d79f2eabe961b5302bd40360d6457d9e118ffbf9874b