Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
29-02-2024 08:46
General
-
Target
2024-02-29_7c5ae7781656a6ed42a3c5d55515218e_mafia.exe
-
Size
414KB
-
MD5
7c5ae7781656a6ed42a3c5d55515218e
-
SHA1
e503c7438e5fd232660b52dfe97a776b0ee74148
-
SHA256
1bf2da319a0669fea40fc6c0f852e09100840a169cca152eb96475960513abd5
-
SHA512
2ad1b4fe3d7197db1c2d176abb37d86f3265d4bf2eb2ea3aa59d460f08b64fc639faec1df17477c1cd55e1ab296d6cda7b271e2f21900dfd769bed711be5efa4
-
SSDEEP
12288:Wq4w/ekieZgU6lGdbXx8YLJY8Vt3h8WKglx:Wq4w/ekieH6lkXxv/Rh6gr
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-29_7c5ae7781656a6ed42a3c5d55515218e_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-29_7c5ae7781656a6ed42a3c5d55515218e_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\623C.tmp"C:\Users\Admin\AppData\Local\Temp\623C.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-29_7c5ae7781656a6ed42a3c5d55515218e_mafia.exe 6E05E233139FADA3FCBFF0DA94C3D0693386E3BD0EC188DD1F6E31C88C1FEBB6152B0EDA1EDBDA8620EBEBB56D0F0BD3603FBB7715010D73A8C70734EE4F69D52⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
414KB
MD511acd8ddfdcf75c8d906cbd11bc74e1b
SHA1ca29c03cdd2622b74b1f50340bb4103f21cd3359
SHA25659e9fdd93bbceb161bd5804453b7750b6de7b1a97d6f8bbcf02d35c47d27ec32
SHA5124e0feff6235d3cc5e6bf5211cfc33ba7fbb84b65866a20a2d785819810621e512f84bb908b81df743c4aa2402bf5d1637e828d839930a50288a17062e5b5bcd1