Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
19/02/2024, 16:45
General
-
Target
2024-02-19_a40d3e2e50df27d5f6bde680ceefc799_mafia.exe
-
Size
412KB
-
MD5
a40d3e2e50df27d5f6bde680ceefc799
-
SHA1
17a8e7f7ad631da2cd9f18ac9a4005da15102673
-
SHA256
ef5cf755236b031ee8532261d7c1e9d08fc916d53abe6113c5ca5b59241ab1f9
-
SHA512
913a8cfb87d0ce18d035114acd0c74786682a0b76e906c053e5483a4b8e2bc2f07212d74a8acdf71f7503e24c49bab6eb9bb4fbe8057e6b4d4d4f21e1841f426
-
SSDEEP
6144:UooTAQjKG3wDGAeIc9kphIoDZnbDMzClNYhD7tJKk4ritpFYcMt6h5zQP:U6PCrIc9kph5d0B7yk4rGpFkt6h5zo
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-19_a40d3e2e50df27d5f6bde680ceefc799_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-19_a40d3e2e50df27d5f6bde680ceefc799_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\871A.tmp"C:\Users\Admin\AppData\Local\Temp\871A.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-02-19_a40d3e2e50df27d5f6bde680ceefc799_mafia.exe AC4F3B8C7C423ADB96CE9D70E440399656977708E6C322CD5928DF0832436386A5DE0760C8E3A05C8285C0749407BC38EBF947A61F83BB6D114B9664E58839B52⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
412KB
MD5e8a5b05ced9d94235bff3a0e97fc0215
SHA122626113ebe2570c884fb3307191421fa0d7cf98
SHA2565a27da9e55bec7cd89bfe0ebb8980766905937e4a67580fdeaaae88f2abd41fc
SHA51243fc3e463e68e3a5e9514456c1039d5c8f4f490171208920319df3345bfbb47c805d38391332f24c26aa674c680e6ce1a905d1581b0f5b7c1de6603609d81aaa