Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
18/02/2024, 18:32
General
-
Target
2024-02-18_44dced8aa6d9135150fc1f75c8effe0a_mafia.exe
-
Size
411KB
-
MD5
44dced8aa6d9135150fc1f75c8effe0a
-
SHA1
0f9c0e5aeaf449d01993fc2449c2a85c67ff9a7d
-
SHA256
cf4f73de56118e5d761a56ccef3246d07e95469c1435658cec5f9313520cae6d
-
SHA512
0c2bc556dcf6effdb21d5e74196da1210f7a867778b687367d47edea08136af7b75ce41e513af4ad7768caf7e50f86b7bf19ad50058dc630c2c38785d009c1e4
-
SSDEEP
6144:gVdvczEb7GUOpYWhNVynE/mF/CHr6QcSX23yX6Eey+maJFqHI:gZLolhNVyEUCHJc930QwMqHI
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-18_44dced8aa6d9135150fc1f75c8effe0a_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-18_44dced8aa6d9135150fc1f75c8effe0a_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\1094.tmp"C:\Users\Admin\AppData\Local\Temp\1094.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-02-18_44dced8aa6d9135150fc1f75c8effe0a_mafia.exe 36E1AAE810CC9954376817FEBE0107EABD36A2773956DDB476E1B893152705D12C7AA271884B13175771FC31DC1E9E46A99773DD62A979E825C9DC72904D1E102⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
411KB
MD532e2d41239fae16a4766165f1bac09f2
SHA1ca2a7e3c2c4db5c69763719eda507e390b1719a7
SHA2565f79b0bac9a81fa456b82c803f9ad64813168f21299d54a28bdb48cc6af1f16a
SHA512ee6a6fc6cdda479b9dcd7f6526018e50e5a23c752018aa82aadf02cfe3634e2380a011b832fa61fb6e475662bdfd87204e55ac32096538432f420255f565c5b5