Overview

overview

7

Static

static

3

2024-02-21...ia.exe

windows7-x64

7

2024-02-21...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/02/2024, 20:23

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-21_0553784e7867d6e3a7b4505983a6ee10_mafia.exe

  • Size

    444KB

  • MD5

    0553784e7867d6e3a7b4505983a6ee10

  • SHA1

    94144cfa01b84a0f7f94de7f931dab8ab8724854

  • SHA256

    ff335b9b461b0f1134402dbeabb025456db451f894f221a0f896711061dc1da0

  • SHA512

    aebc330bc20028ce8b0a087b7be9994c76223390a307ab3196347fa76525e154277589f6d7e8bd763ac77634fccc3aaaef49a799a529fcf9a8aa38bb0c6175ee

  • SSDEEP

    12288:Nb4bZudi79LxTeEdHovORKuhV+SVThBmneA:Nb4bcdkL5eBWdr+SVTPm

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-21_0553784e7867d6e3a7b4505983a6ee10_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-21_0553784e7867d6e3a7b4505983a6ee10_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2512
    • C:\Users\Admin\AppData\Local\Temp\3C45.tmp
      "C:\Users\Admin\AppData\Local\Temp\3C45.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-21_0553784e7867d6e3a7b4505983a6ee10_mafia.exe 89D9DDF49CF9144EF233AA8694E7C110A2DC8C4C99CE0259FEF9B3269A333E5F6E486D15913C6CABE95B3620ADA8ED3F04A4182828A369DE295745338B4025D6
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2624

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\3C45.tmp
          Filesize

          444KB

          MD5

          e0e801ed20e4ea31ea7b69868429dab5

          SHA1

          185924fd9b1fcb8f6bba5d3fbb7053a8096ae276

          SHA256

          c7f275ae8ac8c8543429d779139c221b3c228b665258e3f7eaa361f089ef5e86

          SHA512

          4ae929fd88210bd2002798164e65fc1ea5aba0e7081c7007adb46ffb8090a0bf0f5f83f8966ed1dcaa3424edfdae08b145e4cd8831c4908363d7e0ac05badacb

          Download Submit