Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
28-02-2024 16:08
General
-
Target
2024-02-28_df300491c8fd545c36f1945568db1945_mafia.exe
-
Size
486KB
-
MD5
df300491c8fd545c36f1945568db1945
-
SHA1
4707b963038372f61092643cdb0d234015cfb444
-
SHA256
c3b81962b5011e63fbe89bae51677f5d86e303da341010feba36f740f305a5c4
-
SHA512
ba8e10031773cb1a8502a732ff377889dc0439961274e4258892b4512411cc531a56c0764f55125e992e0a3a98c56e56991c173028555b3a95837456d470421b
-
SSDEEP
12288:3O4rfItL8HPJq4XsL1kcyDkknJNk+ex0VllZgK7rKxUYXhW:3O4rQtGPJqVkcyLJNk+eiWK3KxUYXhW
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-28_df300491c8fd545c36f1945568db1945_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-28_df300491c8fd545c36f1945568db1945_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\CA51.tmp"C:\Users\Admin\AppData\Local\Temp\CA51.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-28_df300491c8fd545c36f1945568db1945_mafia.exe 85584D8A5443C540D8227B07CA20E2E3FF200FD7A6C5A00F50C0923B7496913C36FEA69565293C104D43546297E7C1B484996CA1C217780AA9CAE4F61EFB480B2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
486KB
MD5bdf9e44ea998e6a4fe16f2df2bc812e7
SHA1dba5ab82ced52f545b3f249b800fd0ae9a4a7241
SHA256832f88c389e3ea1d0e8af1910e9577b6148d5ba13717dea55696a12db9a40c7a
SHA5121fad01ed7a2dc2a6f8873b5779fc2775d384fb70ef30ea5a86bd4eace8bf6cc56d6816080b99c5ad18157eda24f1921928d230d07d33b38267c949c93773f0ac