Analysis
-
max time kernel
121s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
19/02/2024, 16:44
General
-
Target
2024-02-19_9d07676d1488ab20ae7d3dc8a42df81a_mafia.exe
-
Size
384KB
-
MD5
9d07676d1488ab20ae7d3dc8a42df81a
-
SHA1
5edd88a4cad4c4b0f449a4aed1a345b9082f1f27
-
SHA256
f4350c6d2021a75385323916aa1c89027c67d92b687871e31eff636c887d6ef4
-
SHA512
230df10e97754465f3a80f64fd5561a8b5155b521a20658904a02da68d84a85330897754ed5f302353db7038e9d54ecdcd191060951d838dc2246ee1111abec1
-
SSDEEP
6144:drxfv4co9ZL3GBGgjODxbf7hHTlTb5Y0CY6XBH8huxXk3B7Nod0n0egaBZ:Zm48gODxbzNDtCYDuxXv0n0egIZ
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-19_9d07676d1488ab20ae7d3dc8a42df81a_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-19_9d07676d1488ab20ae7d3dc8a42df81a_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\478B.tmp"C:\Users\Admin\AppData\Local\Temp\478B.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-02-19_9d07676d1488ab20ae7d3dc8a42df81a_mafia.exe 38E1D2EB15C81E6E49F273A6706E19AB50802F7B4C220FEF475204E762EB1869C0481985C1A9648B235EED6E8D13CA5B92AF17E04B2D56E84C88E1AE74DD92E82⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
MD50370d085021cad370f9bbcd9da50f869
SHA155b36da8c09776d8ae750fe90be13684bda5d77b
SHA2563ca16683f1c1fd7257d6f2e633612bb3cb4742b1ff1352d1b0581560620859db
SHA51240fdc9f7a9b0d13cd8fcbbb16c119f143e2b4663d7ddacd44a55b1aae7c173ce72300dd2b29add13722f447e603a77c09e055dac9ff559b480712fc688add5f1