Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
21/02/2024, 14:48
General
-
Target
2024-02-21_a280bb51f053094184c85cfd8cf3bf71_mafia.exe
-
Size
486KB
-
MD5
a280bb51f053094184c85cfd8cf3bf71
-
SHA1
0a979f79264b410b61c2fbd857debe34c181557c
-
SHA256
a1df1edb32d1bc8bee9fb36b4cf15eae9e9a4fa64f9b622e007a9a2ae8bf3198
-
SHA512
4a85683ff1b4b8270a73fcde0bd641cec7a023afda3ccbda04856f38396884a0328446f28e26106ec6c1fd0b33ce347bdbb4df04c570a64592a75310c8f7763a
-
SSDEEP
12288:3O4rfItL8HPdxYYGER1CADCWAIevgq7A7rKxUYXhW:3O4rQtGPd1GEXCoAIePA3KxUYXhW
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-21_a280bb51f053094184c85cfd8cf3bf71_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-21_a280bb51f053094184c85cfd8cf3bf71_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\1D31.tmp"C:\Users\Admin\AppData\Local\Temp\1D31.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-21_a280bb51f053094184c85cfd8cf3bf71_mafia.exe 1C9932CE43F3874A614D16FC60BAF8322A58475C94C3E642F5B4434516943373868081F5313E24E8B9B08F508F29604D675D9BE86802E47C4360CD1F4936E4252⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
486KB
MD5285fc4ef20d8a99964054be7539d00a3
SHA13eae68cb703cb425dd5cbb6e7e21f9d49c41e7d4
SHA2567db2abdf5f238b46fdb51cf9398d662ef8803fbf2cf23fc51d8a5562be36525e
SHA512aa1551a338e8315e58bfbbcf53995c3c3c3960cb817e96e983466bab96ae92442fb02769fd013f7718c8f36306d567cf411259503cdcb88c544017e1a3da4d9d