Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
21-02-2024 17:49
General
-
Target
2024-02-21_4fa016e38a6c828e621b9fffbc70ca49_mafia.exe
-
Size
444KB
-
MD5
4fa016e38a6c828e621b9fffbc70ca49
-
SHA1
003773f5e230a7b2c526826f7ec18d1c45705c3d
-
SHA256
2b9f4afa2d29682bb6d25195b9c2906486e9e8deebba6dcdfce403ebbe329bb7
-
SHA512
a07d707f4066e3a61830cd0171fe8df3cfadcb768de02d0e884013c1b77bf0a0c098a63f2927632f9f048b92c57e894642a017b4d68f5c78c00bcc5e0b678526
-
SSDEEP
6144:fFrJxvldL4c5ONK1xgWbd1s79+iStbDzfIlF5jlZcXmR1UJNZYgflx1rVI3KIA/a:Nb4bZudi79LU65T2mR2TYy3JA
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-21_4fa016e38a6c828e621b9fffbc70ca49_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-21_4fa016e38a6c828e621b9fffbc70ca49_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\3D00.tmp"C:\Users\Admin\AppData\Local\Temp\3D00.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-21_4fa016e38a6c828e621b9fffbc70ca49_mafia.exe FDDFC5B3418B5036763A5569DC4913E07D92625BB8DE932DB0039E7077B4E32AEA415DF0DBD9D908B72C3B29BB3CFF99649E149BE8FC27C685EC0391AFA37D242⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
444KB
MD5a698c6576e47607b05435cc7ffc8a6db
SHA17c7277049b0ff61a95cdb55e2c18080a97ce4640
SHA256b645b6fb895080a75cf591b18d7d851461f91535421a94e933808e9e68e94e35
SHA512cda30c64fb076a34c64705f516eed4e8e44ba4bbffa38ece651502afee8a635fabda9210ad37bded21c71c806f79115f41acbd001a1c36fc3dd3893361c2d88f