Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
28/02/2024, 22:32
General
-
Target
2024-02-28_e96c95ef200bb4c63e98bb6562cef25b_mafia.exe
-
Size
384KB
-
MD5
e96c95ef200bb4c63e98bb6562cef25b
-
SHA1
896ef0234d426eb31825382e8dbb67edd5d6e185
-
SHA256
e06af65097b4740f92d435a03725c03547255dccca7ba85edf20c6024f333386
-
SHA512
ba3fc6013ea18f7374c578dbf6c14e1cb285069108eb29b86ccfa3e542bd94b78e69cd5c07b30b7da90a732cddeff93549dadbf691734d3c873e9d92424d6709
-
SSDEEP
6144:drxfv4co9ZL3GBGgjODxbf7hHx1mlJi7zAlEv1aFtvdV7M4GZ:Zm48gODxbztsJi7klEdAtvDVGZ
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-28_e96c95ef200bb4c63e98bb6562cef25b_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-28_e96c95ef200bb4c63e98bb6562cef25b_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2127.tmp"C:\Users\Admin\AppData\Local\Temp\2127.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-02-28_e96c95ef200bb4c63e98bb6562cef25b_mafia.exe 2CFAB890FDF7EBB874CE46846346367CFB7E57D37A78CCCEE486D6EBB05CB3809A9868268AEF2726E08C62837E52925818045C259C0225036927BDDA325FB6602⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
MD5f54a660e90bf11ee3a297edb2a4d4ff7
SHA1e387b2a11cbd5631e501f25e62a065e75733e659
SHA25647a9a5cd449525fce704bf59a37a3ba3cc6109c81a552e928d92f8ebb14b90a5
SHA512333e7a9fe4a59b6e452e19378d851fb0d470cc18c05be77dd3bacada847133d520c2d815fef90fe4ccf7f8a0fca11bce3bf934091bde451882ad185ba87fa73e