Overview

overview

7

Static

static

3

2024-02-20...ia.exe

windows7-x64

7

2024-02-20...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    20-02-2024 06:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-20_4702698af7ab810f25b90e72ee115591_mafia.exe

  • Size

    414KB

  • MD5

    4702698af7ab810f25b90e72ee115591

  • SHA1

    a6ba70a8be0acb0582f20a7db6aabcf354b2cf26

  • SHA256

    c88834109f0c92cea59569900b9825c8e10f8b58a638ce11f6f0b75240633f28

  • SHA512

    32aeec1afbe7f4b62851b954b4f936142a514e9dcdcb016225ec5ed737eb502a4080731d92b916f671bafcfe1863ff239ccb10872f4b9e830282b80577039100

  • SSDEEP

    12288:Wq4w/ekieZgU6uCFdb60NDetPr6HZJp+lx:Wq4w/ekieH6nd/IALIr

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-20_4702698af7ab810f25b90e72ee115591_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-20_4702698af7ab810f25b90e72ee115591_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1964
    • C:\Users\Admin\AppData\Local\Temp\3D2F.tmp
      "C:\Users\Admin\AppData\Local\Temp\3D2F.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-20_4702698af7ab810f25b90e72ee115591_mafia.exe 823F6553C0DBAD471D35E9BF30ADD900C1B822C1D93D93D9E6F0E32F29452EDB277592C5E2D48F207C4C8B60FF0A57BD0BEFE9A6E0DCD7A326D1F0E4E72BD98C
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2484

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\3D2F.tmp
    Filesize

    414KB

    MD5

    05f2ae02ce2ff1d58b273d0f2616b5bc

    SHA1

    2b9fe8ee797f0ffffb8eaf5965a59851b966fa94

    SHA256

    443a23455d369c1d2cacb767db02e54fc5f4ca9ce16642850d561af5d5ec2c08

    SHA512

    1fda112967cca0b7f9e9c18c6c154dd7f2c68b41923b6c2a1eac994a999316feb3b8a494d5727a5511e99b9e640ede7965b38d1f146e3a10ab27d8168918b2d6

    Download Submit