Overview

overview

7

Static

static

3

2024-02-20...ia.exe

windows7-x64

7

2024-02-20...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    20-02-2024 07:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-20_9b5c31bfec5f52283446d69454067a21_mafia.exe

  • Size

    443KB

  • MD5

    9b5c31bfec5f52283446d69454067a21

  • SHA1

    9739b2b909e5fd1ec796c40c35d15a37edd490f6

  • SHA256

    fe00655fbbfba82387ec08383c28bb74e7cd28574e58367f9711405ce8a3903d

  • SHA512

    2755d125655302f1b507ebb880dd1fcc67d1ec54fa307d855ab709a0180934cb9ca041146719788efb25ad4eae72451bb5ee187085071dad115347339d2d10eb

  • SSDEEP

    6144:Wucyz4obQmKkWb6ekie+ogU6BYIn7sghJ090/UPsVC5ZKybIzYlEirFJku/+lMa:Wq4w/ekieZgU6hhTSsVv8IzpykA+lMa

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-20_9b5c31bfec5f52283446d69454067a21_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-20_9b5c31bfec5f52283446d69454067a21_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2016
    • C:\Users\Admin\AppData\Local\Temp\49AD.tmp
      "C:\Users\Admin\AppData\Local\Temp\49AD.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-20_9b5c31bfec5f52283446d69454067a21_mafia.exe EA986E1A9257E9A12BD0B7D757DDDB6C0FAA0A2D74F7B63C8F4676FB75ACFF3206A2CB36A42544A7891A140F5296CB8AEC034B58C15D5B915CA9EBC3F9DD983D
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2140

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\49AD.tmp
    Filesize

    443KB

    MD5

    85f826cd95bd7193808116bb91427037

    SHA1

    fc2bdba8712e867cf37fd007ab20aa8d981c338e

    SHA256

    6de149ac659119818ed290b3e116e97504f20168a1d1431b114395832ce5e77d

    SHA512

    ebfa0979e604cd4251ea284a5c7b1585eda91fc9b506f0dcfa3fad7fbd1ac2de18387768d7280bae4b378b21574c7f84d560662c6ae0627a6794f6179b5e2773

    Download Submit