Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
25-02-2024 06:34
General
-
Target
2024-02-25_8cd26a0b4c38e518c9a0a174a2f105c8_mafia.exe
-
Size
444KB
-
MD5
8cd26a0b4c38e518c9a0a174a2f105c8
-
SHA1
bb1c82a0e6fadab717012fbcdeff0648409f60b4
-
SHA256
1894e2b7aeebaf79ba80452f189bc79a8813033ab74db9f4acb9888de1abae1a
-
SHA512
ed70a38032210722f8f80aa381588e08c6c6d4720a083d349e691636613c8d97c8d629ac6d4f5e3d2ca7f6915d06523b30eb4b4c31cca603a8517ef3ad40bf5d
-
SSDEEP
6144:fFrJxvldL4c5ONK1xgWbd1s79+iStt9wb1PbZYIiUZ8EN0EqFWf4eovoKeAeA69z:Nb4bZudi79LQ9y1PbGIMM0jWfjAh6MA
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-25_8cd26a0b4c38e518c9a0a174a2f105c8_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-25_8cd26a0b4c38e518c9a0a174a2f105c8_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\4FC5.tmp"C:\Users\Admin\AppData\Local\Temp\4FC5.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-25_8cd26a0b4c38e518c9a0a174a2f105c8_mafia.exe 8AF01334255E13272E4A6DCF8F7E74DDC4D1DCD3BB7D892DC7BBD6FB71FBCC369D6DE97C2EE5303FE0FF6740A2B5FD30B913A0217632B28182743C47C54318292⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
444KB
MD5b6611ea1374fc7854386231d34b10abb
SHA17883fa66a1df623864260fabd438d873f1b3704e
SHA2562f74df4aeb5c1cda9d58ca78262a3beccf9c61639375ef09455f68fa8f88635d
SHA512befdb11b34fe39a3a6e8c528cffac6105be6ac172b2258416cd7678242ab0ae5a246f5bd76f21d786e57c9324defb180ac37b43a6ee6ec3e2cc288d3c05603e7