Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
28/02/2024, 04:47
General
-
Target
2024-02-28_47a01437ea48960ac6ca6a1b80975214_mafia.exe
-
Size
433KB
-
MD5
47a01437ea48960ac6ca6a1b80975214
-
SHA1
372522ae5263d30dae739f4e2c0c6fdbe01d6440
-
SHA256
afca587d57934074be99ec783124d21c550da8de098071ad658eca1a0d4d5794
-
SHA512
51b66f208e4770ae86aca617d15681cde825ba4e74bc1337a739df07978d1f916de7d084743d8f6b2d56d4a050ead92c4bf46141280776b49d81c832d84739ff
-
SSDEEP
12288:Ci4g+yU+0pAiv+LejSLZRs68g3b4yVTerbMmx+NJTnn:Ci4gXn0pD+GSLvs6tbfwbMk+N5
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-28_47a01437ea48960ac6ca6a1b80975214_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-28_47a01437ea48960ac6ca6a1b80975214_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\149A.tmp"C:\Users\Admin\AppData\Local\Temp\149A.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-28_47a01437ea48960ac6ca6a1b80975214_mafia.exe D7C83A922CB686DC379EAA57D2417F3EBEAF1FED4DC84A2F2867FC24160D210C5369E9119981FA4981ED7D6F4E416A87F9FDC6A076306BD8EAB36C47397114632⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
433KB
MD5df2fcc4a9f2ceb21a5c0d6664a1e667d
SHA1e1379d0f86f8807054f1cc9def28b86ff4a8a000
SHA256bbe0a5ea798b79dc421bab6314f3c056ebfe37de7da02767401f50e4d49071a6
SHA5126df2acd5a55bae1fe48b7b2f659b7d6273e927c725fea79e12d985e1f6b433ffb9f1ec097b5e176ff0021a9d8e21145fce3f974b6f9b2c3244cd5a56b2cfc4ab