Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
22-02-2024 05:55
General
-
Target
2024-02-22_9485278858bba0436ef7c9fb421bfa41_mafia.exe
-
Size
476KB
-
MD5
9485278858bba0436ef7c9fb421bfa41
-
SHA1
d7d5f2e7da9765b45756850912afb46ffdc50fea
-
SHA256
7c14652487569be9c4bfa698b73214a1ef918fcbbd0fd033acdda79604ed0441
-
SHA512
7408c67f3076a79316bb7a1118ccb5e0abd6b73b1d743dc9c4e3a60d2122c135a6e9a8a555420b29c3bdd96b67460da1fb3075fae29da41b3f4f260c15c3e2d2
-
SSDEEP
12288:aO4rfItL8HRExqoQ7rzT0du66KdDrzPC7K9wlsDpVFd:aO4rQtGRCqDs0AC+9wlsDpVFd
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-22_9485278858bba0436ef7c9fb421bfa41_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-22_9485278858bba0436ef7c9fb421bfa41_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\F2D.tmp"C:\Users\Admin\AppData\Local\Temp\F2D.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-22_9485278858bba0436ef7c9fb421bfa41_mafia.exe 1BCD5F8E9D1A67F9A174FB7F7292A3572D015F55C9C0E63A055930C98AF3510CDCC40C962C5F86B48C2E41585990DA62E07598B07E509CF4EEC80A6D2A93F1692⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
476KB
MD5f5d010c0f787ed84cdf8dcd05eecb3b3
SHA17822758ce37f54af006d4fe088d9d6ca25eafed0
SHA25640f02a8b35e0e15f9ed71900aed355979df89a54325cd4c86aa7035782ee1490
SHA512d0709c69192ec119723515c93ffc0df85ab3425ebf59d27cd9486ccfe28f2806ffeaa60e281a891e0d127617ef389dc50d5980141a8fe01a536c058028e4f2b2