Overview

overview

7

Static

static

3

2024-02-25...ia.exe

windows7-x64

7

2024-02-25...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25-02-2024 15:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-25_567c2e216cd0e9d6e40fb493d42d2318_mafia.exe

  • Size

    486KB

  • MD5

    567c2e216cd0e9d6e40fb493d42d2318

  • SHA1

    719834a0032be41f09c7f5c34eed000a7ca0ece7

  • SHA256

    a27140a3f299a4f44984c7df84a625662f06e92bd4de70f6b36918849a407a4e

  • SHA512

    a0e2a39b4b9aca18d18b3474212a47653c8df98fb4f4066c5a915026c4d2910c6a0258418d24c638584a78046e8103f140e7b3a3fa374e9b53eb7094ab3ad917

  • SSDEEP

    12288:3O4rfItL8HPdplNXSWYeWEjrIeOGxh7rKxUYXhW:3O4rQtGPD3XSyjEeOsh3KxUYXhW

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-25_567c2e216cd0e9d6e40fb493d42d2318_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-25_567c2e216cd0e9d6e40fb493d42d2318_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2312
    • C:\Users\Admin\AppData\Local\Temp\4DD2.tmp
      "C:\Users\Admin\AppData\Local\Temp\4DD2.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-25_567c2e216cd0e9d6e40fb493d42d2318_mafia.exe 9B499791C90913F31509A2780EA189BBD9FF5ECD7E20DAC38F61736967BFAAEE1F5F25C930AB42FCFB6B9F99CC1F73BD7F6AB63BE4140C3C38EB174FAB346256
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\4DD2.tmp
    Filesize

    486KB

    MD5

    58eef42bf3cabb9a415fa86a2abd9f03

    SHA1

    b196eab6e4bff058b23b41d789dfbe545757b211

    SHA256

    bcdc2d501c8d85191e6df0e3ca9b8400d04b44bf31b6eda05492e2a1884e2a69

    SHA512

    1b7b76a67b4a995406663b1a4f45027bbd20616e1c6b899e7931f79b30fdcc4edc66ccb92acc608024e0494d94936204d76754b51b52a76c43162d9d3d6ac9d4

    Download Submit