Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
05-03-2024 10:37
General
-
Target
2024-03-05_aaf87d54ea41e066cb3bc6018a9cd4f6_mafia.exe
-
Size
414KB
-
MD5
aaf87d54ea41e066cb3bc6018a9cd4f6
-
SHA1
80a696517a475d7ae597033c0b6c3eb4a98d5584
-
SHA256
294c33fcc48f7ab89acbf33f9d17b96d384f9cb0a7e9fb83cdb6b7cdfbd5d1df
-
SHA512
2faa14975298ac7e895f82d0c25c40e0e28cdecf3633ee2046a459b99f8796af931a7773b183c08a31e9f46be682f7504e04004a79c6f096b1edf2b223f61ccf
-
SSDEEP
6144:Wucyz4obQmKkWb6ekie+ogU6BYdfNfS7hWcBPj/DUjkZedq/A0611UV+l:Wq4w/ekieZgU6gBCsOPLDEXI/P6Xl
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-05_aaf87d54ea41e066cb3bc6018a9cd4f6_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-05_aaf87d54ea41e066cb3bc6018a9cd4f6_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\3DDB.tmp"C:\Users\Admin\AppData\Local\Temp\3DDB.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-05_aaf87d54ea41e066cb3bc6018a9cd4f6_mafia.exe 36C5B8BE4BA88B21AA4CA05314495714AC7E50E5E60990795F9CBAB5936FDACDA82EECA49F556461093ED47BC418F18819F4997A079A912FFBC99BD4AC40E8482⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
414KB
MD5767c5def8d2411a4f155bb8f7ed95894
SHA189b94e103c7d61d82c582b3c6966bdbf76487b1a
SHA2569a55a8ea913f1d3ebd7c99fd664d91108e3eb8052fb72c7a2e22daa4b8b192da
SHA51246c4014ec04d31fa1e18da96d3cc3dd8b64dd1b89a79d568c91e6708e5f240e207f26b2af8bd58738ca80ff04b0141cc2802306c5b298c64e30daa00d2ac7081