Overview

overview

7

Static

static

3

2024-02-22...ia.exe

windows7-x64

7

2024-02-22...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    22/02/2024, 06:29

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-22_398f49d914de289f50a1a3c2e5cfeced_mafia.exe

  • Size

    479KB

  • MD5

    398f49d914de289f50a1a3c2e5cfeced

  • SHA1

    0b1fff571db2878c95f66f012e550fb25656622b

  • SHA256

    7367873dbd91d88883158a30cdd771c2fb39dce09b34eb4148c400ce6f2b7981

  • SHA512

    c3c3af749dcd809dd4d79dfb77ed6b76641459830c829cab7eb08e6e5ca3f9256b370a537549d9cad6342a1eac85f6ac7cf17728489337a29e42dcc8f702c7f2

  • SSDEEP

    12288:bO4rfItL8HAFcLROyFVw3ORh0h/zsYfVE2hq75UO:bO4rQtGALYTO/z3tE2gVUO

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-22_398f49d914de289f50a1a3c2e5cfeced_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-22_398f49d914de289f50a1a3c2e5cfeced_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2260
    • C:\Users\Admin\AppData\Local\Temp\1545.tmp
      "C:\Users\Admin\AppData\Local\Temp\1545.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-22_398f49d914de289f50a1a3c2e5cfeced_mafia.exe 6A3E13C342997CF74B1974CA8CAD515E2D9FDA8BA5FE6CD3F60B959CEA393875479E4AD1C73609A7F5749613B607B4FBD1194E1DAA2A6C80041D8A0D2DF37E02
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2324

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\1545.tmp
          Filesize

          479KB

          MD5

          ded010b2ddaf4a9f85d5c729c98aa848

          SHA1

          d82eeaecfc05dc83e7235e0fd17ebac49ba29455

          SHA256

          1739c735153db6f845243a12d0ebe84c395347cc0a5390e93552446936b6ca2f

          SHA512

          fee2484170e6e03669d44e5329a3d841cf66d3fec177b9b3e09cad6b19e4dc20967f4bcab439c2431ba05ba80fd70c7207e75edefb84424ada354695ee4eb190

          Download Submit