Overview

overview

7

Static

static

3

2024-02-19...ia.exe

windows7-x64

7

2024-02-19...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/02/2024, 01:40

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-19_8509fdd33689baa06c650b3b6c8b947e_mafia.exe

  • Size

    444KB

  • MD5

    8509fdd33689baa06c650b3b6c8b947e

  • SHA1

    73d54afe9e524e36f12d132a36dad94911f98c3d

  • SHA256

    8c7e4b37a1d744ab1aa5eb2c2dad56bd06cc7ba4f8f14dbc995b3eb43f2c02f5

  • SHA512

    bb0dd5695a9d5b2ca1c53758a110261892de72bbd27c1a2847ef6a00098afcbaa3e79c49c2b0f2aa77eacf65e9f147c84d933079465bd8c53fc169627e4b6d01

  • SSDEEP

    12288:Nb4bZudi79L+T9+HTOXJ1vgn0HsKMvRi8d7oA:Nb4bcdkL8sKXJO0HYv08d

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-19_8509fdd33689baa06c650b3b6c8b947e_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-19_8509fdd33689baa06c650b3b6c8b947e_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2204
    • C:\Users\Admin\AppData\Local\Temp\88BF.tmp
      "C:\Users\Admin\AppData\Local\Temp\88BF.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-19_8509fdd33689baa06c650b3b6c8b947e_mafia.exe 02C7319FA3C76CEAE1A6ED8F7ED2535BDE6C40CF45CA0D28F0C96B55AC2CDC80548AC1BF0B5876964EE674329D4C46BFC5C3F7DD3AAE8020E65203F040FBE1C9
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2200

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\88BF.tmp
          Filesize

          444KB

          MD5

          47f84874ce292632a0f576243ad796c5

          SHA1

          17b473da35a9d46d8822818d9e6d3c152a9ea0ed

          SHA256

          a07a538c3d9d724f65e54024672e2212bc30823c442bfddc2335a0504dc9bf4b

          SHA512

          67a42d7bf9b9d6f8d531cf8ac774af02f91bd82c8e76402ec279c9ea7c291d8b4691a91f0c7422756e3d8f0b503cea62dd637692f773da007f5c0f5deadb0e8c

          Download Submit