General
- Target 2024-03-01_b53623b53e86c389e7f0694f91221443_mafia
- Size 965KB
- Sample240301-bfp4cshe66
- SHA256 c7d57b7d0289e352b064ea184222367ec3001d38075c9fe73662daa90dabbdfb
- MD5 b53623b53e86c389e7f0694f91221443
- SHA1 dc6c595f5a14de28161ab0c3523f4320109242ab
- SHA512 6462cd1c5ed116fa2e789fc162474225b44382b2defc8ee21effcd731e04b686055b4e682505700a3f02a9823ddf2feedad649d2009a3ba88b168b5a9e46de9f
- SSDEEP 12288:BLBjmLuKAu8kkGP6lmg4tkpKh2kvmUzLc1DQAgQyXfZjSrySEsZx62U9rrc5kBq9:ouBmDT2ovcpyfxsZxh5SqHhT
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-01_b53623b53e86c389e7f0694f91221443_mafia.exe
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-03-01_b53623b53e86c389e7f0694f91221443_mafia.exe
Resource
win10v2004-20240226-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-03-01_b53623b53e86c389e7f0694f91221443_mafia
- Size 965KB
- SHA256 c7d57b7d0289e352b064ea184222367ec3001d38075c9fe73662daa90dabbdfb
- MD5 b53623b53e86c389e7f0694f91221443
- SHA1 dc6c595f5a14de28161ab0c3523f4320109242ab
- SHA512 6462cd1c5ed116fa2e789fc162474225b44382b2defc8ee21effcd731e04b686055b4e682505700a3f02a9823ddf2feedad649d2009a3ba88b168b5a9e46de9f
- SSDEEP 12288:BLBjmLuKAu8kkGP6lmg4tkpKh2kvmUzLc1DQAgQyXfZjSrySEsZx62U9rrc5kBq9:ouBmDT2ovcpyfxsZxh5SqHhT
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
NetSupport
NetSupport is a remote access tool sold as a legitimate system administration software.
-
Drops file in System32 directory