Overview

overview

7

Static

static

3

2024-02-18...ia.exe

windows7-x64

7

2024-02-18...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/02/2024, 20:30

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-18_2c269e7a92163e1edb915eb651783260_mafia.exe

  • Size

    444KB

  • MD5

    2c269e7a92163e1edb915eb651783260

  • SHA1

    f904019d7693be5620d58b82c2ba39be4501fa3c

  • SHA256

    a30574175f8b593a8aedcbdd29bd7c00a0c21a7108442321c40460c9729040ae

  • SHA512

    7a4b9df52c44a759955286c1350f94a26094ac715bba964079b03a47e419fadbb080499ed6e6bb657023c187584253cf62050db30912c84ae499d86e4fee31b7

  • SSDEEP

    12288:Nb4bZudi79Lw12VsNI92FHpDxix8lcuA:Nb4bcdkLVD25pm

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-18_2c269e7a92163e1edb915eb651783260_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-18_2c269e7a92163e1edb915eb651783260_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2156
    • C:\Users\Admin\AppData\Local\Temp\3D4E.tmp
      "C:\Users\Admin\AppData\Local\Temp\3D4E.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-18_2c269e7a92163e1edb915eb651783260_mafia.exe D26CA6EEE09F3A8A5C5153FC830E516AFD1BA2152EC081F1EC45FA393C25ADF184C349736F46DB5E2758D23E70BF9F9A6B6B2A6F41E589D4573C4B14AFADC67C
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2452

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\3D4E.tmp
          Filesize

          444KB

          MD5

          71b44bec8d83e8c5ca5caeccadbc88db

          SHA1

          f08e87e7e187ae5dd1306b9cbd8b41b5aec79571

          SHA256

          f65764fd5a025e9a2b61c04f361c3c3f1204524c9e859ccfb741c119bfdfbf8e

          SHA512

          03b1c36c8de0077ee770ee1f99ac365c7776bf22bbd0a98517842960c83819f1d4a7d5509c6a6c7eb75379b354c858d6036d70578e93107c93430591ec8d3a30

          Download Submit