Overview

overview

7

Static

static

3

2024-02-28...ia.exe

windows7-x64

7

2024-02-28...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 07:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-02-28_1fbb7cda8ceb4687b84a7c1db4723605_mafia.exe

  • Size

    476KB

  • MD5

    1fbb7cda8ceb4687b84a7c1db4723605

  • SHA1

    5ee4c68d8a23613a417041f98817d64422157b50

  • SHA256

    3e9667b2a430f8e017e9aebe526819dec5bf8b21b1f54cb989d03a57c834748d

  • SHA512

    1f17cf5d7212dd0fc654ded9327d3c74ad983be00d637a5a6c7dfa184f0c89eab8f07e7e9dadfe6b8d105f41f8402336576d8e062b4d4b63637b87a80c412727

  • SSDEEP

    12288:aO4rfItL8HRDVFbA6y8CZot/DdZf8j6/eDDxkR7K9wlsDpVFd:aO4rQtGRk6yjAdZxe32+9wlsDpVFd

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-28_1fbb7cda8ceb4687b84a7c1db4723605_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-28_1fbb7cda8ceb4687b84a7c1db4723605_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2180
    • C:\Users\Admin\AppData\Local\Temp\DE6.tmp
      "C:\Users\Admin\AppData\Local\Temp\DE6.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-28_1fbb7cda8ceb4687b84a7c1db4723605_mafia.exe 01C280F122F0B576B3ADB91E636A53AC0512089D03B20C916AAA3EF09B3BBDBCA495020783A661557211D0EF4AAD28F4FD8746DF2F6B6B1147548BF43327EF92
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:1584

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\DE6.tmp
    Filesize

    476KB

    MD5

    cde3dab7383a59009c3b0aab7ffc9284

    SHA1

    b7ac009e74fbad7577d142be3795ca8929a81560

    SHA256

    99ce990d70817bf7571f2a3aeb75734baf014a8b0367a91ef57ea6be4b22ef2d

    SHA512

    9c4113bffdb9f6163b8c12a01045c4f08fce0a9716ca69afcfaa69c564eb67f992e7e6007ce57db00f4bf9c8d43c2c8ca86766c53329f8e0b28d84e169f841fd

    Download Submit