Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
24-02-2024 18:13
General
-
Target
2024-02-24_da263bd6937f03408b3cc66c52e56de3_mafia.exe
-
Size
443KB
-
MD5
da263bd6937f03408b3cc66c52e56de3
-
SHA1
9f0e3ec57ae9fa6cbf27d5c38fb9cc7b2b79a17f
-
SHA256
884855f0751017de85d2391ce351df461cb7f10d739ef4201742c1309621687e
-
SHA512
d17b22ba4b1a8c7bf4b0da71ea54bf5815fcfb05dbe883ff1bd2844d9e621d61394fb6b6b3677acce99be0e35ca25dd2bd2d4a8e43242f72037819ef1a9e7ec6
-
SSDEEP
6144:Wucyz4obQmKkWb6ekie+ogU6BYX8ELzUb8WTosQ7ZYPHSF9m3lMa:Wq4w/ekieZgU6080UgyWwyFU3lMa
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-24_da263bd6937f03408b3cc66c52e56de3_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-24_da263bd6937f03408b3cc66c52e56de3_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2B06.tmp"C:\Users\Admin\AppData\Local\Temp\2B06.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-24_da263bd6937f03408b3cc66c52e56de3_mafia.exe E7AAB30158EF6F51737B80BFC23D61E46506EC16749CE4DFC088140DF3E73076CF66D5E3D81530DBC6E44048C4A180F4590EDBD57E90152DBF21D0242143EE3E2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
443KB
MD55d04e6b2584c92291992d543930178fa
SHA10b6207aa3a49aa79a0da9cbc0e88faecfbb7b071
SHA256ee6b16541d9c680001f8cd8e8154eacb34d5462430dee3d2c2ed34953e43c8e9
SHA512c04a79963215e21042bc784cee45a82ff7c456e89dae185f77aff3844eda2194320a03c0bb31c3ad39523ef5d661b5308b6c333e46188a657336b31386fb211e