Overview

overview

7

Static

static

3

2024-02-20...ia.exe

windows7-x64

7

2024-02-20...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    20-02-2024 02:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-20_491ec946aabdedd5a5539ef285477d9d_mafia.exe

  • Size

    412KB

  • MD5

    491ec946aabdedd5a5539ef285477d9d

  • SHA1

    f3da4b52f694f06d6c10b2e05d18252027e164b7

  • SHA256

    47ff8ee2d276d895528a084af259e8cc860dea2184e0c663b947e0da2a530056

  • SHA512

    403f7e739bfb9bac08b374c48e1274db8ca3755effc57de026020e1186f41f9ef5e69bbb5e3f0852c97ce78450bd8dcd0dbbe46a829b032ea7f068d4d63e6664

  • SSDEEP

    6144:UooTAQjKG3wDGAeIc9kphIoDZn1gBk0qozGx2F8gEjcga2EZTT4OXAf7HR/Oymr/:U6PCrIc9kph5YDzCx2F839EpXwf7cRd

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-20_491ec946aabdedd5a5539ef285477d9d_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-20_491ec946aabdedd5a5539ef285477d9d_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1632
    • C:\Users\Admin\AppData\Local\Temp\4827.tmp
      "C:\Users\Admin\AppData\Local\Temp\4827.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-02-20_491ec946aabdedd5a5539ef285477d9d_mafia.exe B03D12724DE0E72851CF1C1259B4743E71A3FB1BF31FAAACE3B49F40FABA4237B4C1058B0BBBAF1AD7181FDE3AD0212B0E79847A9DEE13F342AC71DAE38BA02E
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:1740

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\4827.tmp
    Filesize

    412KB

    MD5

    3aa2cde1432fb62f3e3e2bdeb7aebb91

    SHA1

    534a12731bde66c0aa3808685a97cc33f2b28e4c

    SHA256

    a768ce30b001055e1b79c85aa645eb6d0388bbf7b42da2de8a2b230fb46b779a

    SHA512

    8014e3b250508c8b2de0786228d3fc873c368d92f716dcb050510fea43f31fef42fc47adc835779995558c390ed03e7079faadb95b2bdf7f964c704dc3e0bf3a

    Download Submit