Overview

overview

7

Static

static

3

2024-03-06...ia.exe

windows7-x64

7

2024-03-06...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06-03-2024 02:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-03-06_15797df27b16ad67b58bfc9e1ff10606_mafia.exe

  • Size

    468KB

  • MD5

    15797df27b16ad67b58bfc9e1ff10606

  • SHA1

    118fb5704cbd01337e7a1b13a434946f46d4d3f5

  • SHA256

    60b8e96a86b631f8b3b3dadd901b6aa09c3706777d622dbd0865c5d989178192

  • SHA512

    91e7a3db044bec0d886deafedbd19dbc34530dfb5da270d5e118c8555f2a3fd046f517a71ea138d7d8a20996668f03f687168b1e0145ec73754ae889da5f8b1c

  • SSDEEP

    12288:qO4rfItL8HGhlrcjUsd6vraKQnRxqIbK7bWmeEVGL:qO4rQtGGjgjUsIvraKQ3bKumeEVGL

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-03-06_15797df27b16ad67b58bfc9e1ff10606_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-03-06_15797df27b16ad67b58bfc9e1ff10606_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2208
    • C:\Users\Admin\AppData\Local\Temp\4837.tmp
      "C:\Users\Admin\AppData\Local\Temp\4837.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-06_15797df27b16ad67b58bfc9e1ff10606_mafia.exe 1AAECF632F1EF2FD79D402911FFAB87B21A068D26542C8FCF8E6A5540057B364B1FD0A7088F644FC0C23CD7D0FA5208951F29A72BBEEFBB894115989845435D0
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\4837.tmp
    Filesize

    468KB

    MD5

    d4612253e95fce49e009c36c4f566e0b

    SHA1

    137b4974527050f8b515a74300bfdc101edc4610

    SHA256

    f98922204d87cb6e620596533d1b7b9e9a6ec2e3aaf1bd979ba9d925e3e629a4

    SHA512

    1b48d45b3dd67043c75007a882feb3f97cc867a2d51a52663e86508cfb6fe6db0fe88abf6220b00bfdccc343144781b03a17a03095b388e8d5ad4997b5110033

    Download Submit