Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
25/02/2024, 12:55
General
-
Target
2024-02-25_cb12c7512323db488e2e67e6428887b4_mafia.exe
-
Size
443KB
-
MD5
cb12c7512323db488e2e67e6428887b4
-
SHA1
f8085aacc06573e2f860092b14d27f733c8dd0f1
-
SHA256
5f16119e9d89dd4d5441c2eeda3b547ab16007ac4f6fcbfa3a771ba3475f8e05
-
SHA512
7fdca3c64d8c97deb2c7273f08fe7b0a0e2d53229c5bb08def34ab24cef4d8bc18e59757bb76940473913fc85eb488ab069fc22a7846b4b46f2bf9a984411d85
-
SSDEEP
6144:Wucyz4obQmKkWb6ekie+ogU6BYYwI/lv9DvkjdDdo79SfJI8Fd6cQA4QlMa:Wq4w/ekieZgU6TPkpdo79tGdAtQlMa
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-25_cb12c7512323db488e2e67e6428887b4_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-25_cb12c7512323db488e2e67e6428887b4_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\7CCE.tmp"C:\Users\Admin\AppData\Local\Temp\7CCE.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-25_cb12c7512323db488e2e67e6428887b4_mafia.exe 6EEC8BF6D6DA7FA6B440908C681DFC0656382312C16C16919633598F6BDEAF9D581CCA0ACAFB94C8352E35CCB5EA0F413B2EADE9BD7B775A02A391BA93AB06172⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
443KB
MD563f358b5ac37e7713bd67ce0ac53167c
SHA1b0047e30c2bfc8dd4f5aba18ca82cb5127e7cd2a
SHA2567a47add70d96ca0caf8b5cb667d80f089a9004e405773a0487fe96ff59e432ff
SHA512bc7072c9074958c949f8496f28a21c1671faf0a3d77ab71b0c1dd5cb5444d8376223c4480f5cd892ae278c836eae84310a7293c8eb9c74ecb1f02a437dadea78