Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
21-02-2024 16:59
General
-
Target
2024-02-21_b3b672756ccf231ee7f33e73ca83a0d3_mafia.exe
-
Size
443KB
-
MD5
b3b672756ccf231ee7f33e73ca83a0d3
-
SHA1
bf8dccf66047ce3c4cddeeb9a96c16f8df8c2ece
-
SHA256
2d55e700ac2835ae897065bf7a96202ed33116538a5cb2fa8f63e31c0c325ce5
-
SHA512
7f189f73cf65cc35a6fecfcc49e7c005a56fa8476300747d4b65567d1cb5c333a563f936cf113277424dc32c8c20b7e5b5c61a8d0e31f84eb5eaa50c92ca76b5
-
SSDEEP
12288:Wq4w/ekieZgU6+PgCOb+krYzSWDjelgf2PTV/VMJlMa:Wq4w/ekieH6+PgCepla2PTV/GP
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-21_b3b672756ccf231ee7f33e73ca83a0d3_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-21_b3b672756ccf231ee7f33e73ca83a0d3_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\4E5E.tmp"C:\Users\Admin\AppData\Local\Temp\4E5E.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-21_b3b672756ccf231ee7f33e73ca83a0d3_mafia.exe 89A0B99AE3D200129C96E59C8DDBA44DDE3CDFE2AF2A4AA96CA1344F75BB7C51BA7E730B1E8DEF3B8B53E3CE19D5535C367EBCEB5CA517269A363A109303FA4D2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
443KB
MD573f5590e2c56863687a0b6a24639d34f
SHA13a6e50d3a55aafabc07c57d9a57668b3fe10ff64
SHA2563534d7161e5dcf027f635bb3698829254ab2c8b42451beadd3a6270ce220253f
SHA5126b578f8e1844f74c4b08937b24a8e1d563bd729cc3abce46c67eef114782aba5679feea93850338ebf26f95f2d853e365a2ff02587347667cc885bf8787dbff5