Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
19-02-2024 22:28
General
-
Target
2024-02-19_2f20245238d8199a770e9a591b7e2a7a_mafia.exe
-
Size
414KB
-
MD5
2f20245238d8199a770e9a591b7e2a7a
-
SHA1
a81f0effae563bb1f51789df154d926c3e5b1392
-
SHA256
9ee2d94c59327b1368993a17e451e2455b3843c54a2fa951466813dabd3f19a7
-
SHA512
88b60d5b49667c7317ddeb15902127c22c98e4227f32992e141755b30bd401fbc2fa305db5b575e8a5c56e05ddf2967736d54249f7905c09963403b3a86a7f4d
-
SSDEEP
6144:Wucyz4obQmKkWb6ekie+ogU6BYLubTn+2xKuhXGxPuWW0x9uTkr2zE2o9Ig9l:Wq4w/ekieZgU6VbxkPuWW0Z1Gg9l
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-19_2f20245238d8199a770e9a591b7e2a7a_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-19_2f20245238d8199a770e9a591b7e2a7a_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\11CC.tmp"C:\Users\Admin\AppData\Local\Temp\11CC.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-19_2f20245238d8199a770e9a591b7e2a7a_mafia.exe E15449D76E8BE957BAE09FBD5DAE719D9B31DC67FD0CF77AD542EA5F337A0536844526EB3BEBF3B9F7F2C43897149623F61D08C9FBF43223F1C0B6D8ABD65C982⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
414KB
MD55b660726a47fbe83445297ba3c33ddfd
SHA12b5fbbe9d485a54e2b3ff144cad976db36f4e6c2
SHA256b582553baaf87019af8e52a1ff1b9b3d31710e653dcb109a7993c6b421fbf350
SHA512fbddb86a8b391883138a8ddebbfbbdfc00af8c8441a105f3ec618fc575b37e88b6c154804f6d227986328831e65c5a2367bcb746fb2de46738d9370d57c851e3