Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
06-03-2024 06:22
General
-
Target
2024-03-06_a6684ca319ab1dd96fd24d6da0965d66_mafia.exe
-
Size
412KB
-
MD5
a6684ca319ab1dd96fd24d6da0965d66
-
SHA1
60d10f4e4a5a8f13017e0f8e793c40159a06fac9
-
SHA256
3364e8db6d6332baa7ca19062c8af49dcf346abd80fe4573582b7d6f91e84022
-
SHA512
3a11c059b0f7d1381c99b8a738fbea4433503709ff02d0a445680c3393b0da67d2f8327b0fb40884e504e7571e7c14703b3843d8f7be801cff1b38405631ce1b
-
SSDEEP
6144:UooTAQjKG3wDGAeIc9kphIoDZnaz044h+CLa8pIxbJEWzIU9euBIJc7r9G9qdGM:U6PCrIc9kph5sz047bIU9euWY9mWaiw
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-06_a6684ca319ab1dd96fd24d6da0965d66_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-06_a6684ca319ab1dd96fd24d6da0965d66_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\23A7.tmp"C:\Users\Admin\AppData\Local\Temp\23A7.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-03-06_a6684ca319ab1dd96fd24d6da0965d66_mafia.exe 60D15661200D8FF4887C8916189D56EECF8049CE6F4CD5490BF0DA374C891091865014E93AE178FC527EB89035BC3D63B47631EF78349300846AF4B824400CF62⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
412KB
MD5706aae30e6914ec967d8baa91d385c6e
SHA14942d5eabc6f30914d83cb4765b6ff1d5a32ecd4
SHA256dfba8125fa7f0c5cf93e2b7c2d3d81ca90056dafd1ae5265342dee28311ddda1
SHA5127a7ef0cc676c28fe57975759017f40024da5e77c1092e50719ded1815bffbaf206ba654b0daee414566c2d69affc38bbb7598c62e8f152018f591bf73a639c15