Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
19-02-2024 08:57
General
-
Target
2024-02-19_dd323b8fa4bf77eda2fb023c1023f6f4_mafia.exe
-
Size
413KB
-
MD5
dd323b8fa4bf77eda2fb023c1023f6f4
-
SHA1
a09696ae5ea1a367f3cf3a494891a0c127740bd6
-
SHA256
cc8e763d1bc8afa2cb09cef3d5a6cd69d5e49d3ae3c3a111fa076f910ac423c9
-
SHA512
ff2ec6af2ec9a53c7569a75e193ec7d3655bccf5032dd5a8821a3a57675bfab63bf9c0fb7753dbb98c56cbc948e417ced19569622ce381ba386c78ecbfd75dcc
-
SSDEEP
6144:gVdvczEb7GUOpYWhNVynE/mFpL+70zlan3WOXdjlgeUqHg:gZLolhNVyE0C70zlo5gdqHg
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-19_dd323b8fa4bf77eda2fb023c1023f6f4_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-19_dd323b8fa4bf77eda2fb023c1023f6f4_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\35DF.tmp"C:\Users\Admin\AppData\Local\Temp\35DF.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-02-19_dd323b8fa4bf77eda2fb023c1023f6f4_mafia.exe D4A1409EE56C10416943333F58B6936B6F2B7B713F48B47D75F4CDCF17A9E4CBBFF4A7610629AC7988AA921CE51D8FF9686151B38A965A01DCDE7CAAE63829542⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
413KB
MD59cf21f2e3781ca0ca83901a17d32f035
SHA1e4f42e2094773e636d5cb17702d2136ae5abddbd
SHA256a2aca94e483e385af087e40905b30643a489d91de431db7bcc2704302fa32db5
SHA512467974af9953140080783f900d893bbbac17fb416df8f6ce5b24557dbd7ff076fac292cb29e7414b435aaf03be0c83f66bcb03944034a15d3c133d636baccdfd