Overview

overview

7

Static

static

3

2024-03-07...ia.exe

windows7-x64

7

2024-03-07...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/03/2024, 21:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-03-07_07a2480714d6a046d457e80e4946bdad_mafia.exe

  • Size

    468KB

  • MD5

    07a2480714d6a046d457e80e4946bdad

  • SHA1

    2c5a64ee56936d7232a6bb3444dd03c3f2bdc9f7

  • SHA256

    89622bc1dcf2cd1acec2f049ad7440c954fd1e04f2c24e5c37e432f1522478f2

  • SHA512

    fbd1bfd742d2c23d3e8e08b84f67ff8c6ed5483db9f836e83166a9dbf033c6ad312a50d5e55af2b8cb14db6d40a0fe623feb996c6ce19eb917ff16ee3863f978

  • SSDEEP

    12288:qO4rfItL8HGmThgop8g6/mMXdfK7Z8T7bWmeEVGL:qO4rQtGG6SoOt/mguGTumeEVGL

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-03-07_07a2480714d6a046d457e80e4946bdad_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-03-07_07a2480714d6a046d457e80e4946bdad_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2836
    • C:\Users\Admin\AppData\Local\Temp\6336.tmp
      "C:\Users\Admin\AppData\Local\Temp\6336.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-07_07a2480714d6a046d457e80e4946bdad_mafia.exe 1338FCF554520DD20D5E98C39DD427A7498A9E5BE049D1C13D1E2BB38985DFF89BB210E03C1388082AA4F064BACB270336A4625E9C6D810A4884E13F7CCDAD7C
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\6336.tmp
    Filesize

    468KB

    MD5

    fea298e7d2dde7149c3b3b3daa4ba6ed

    SHA1

    321378250bbaa49487ebcdfd66348f380110d7b4

    SHA256

    2f82acb35946538e519836c1be9b0ce3ef3511d5a1bbe68303d0d6cd22731627

    SHA512

    65a242a4a9d12074ff2b8103e7dd2202a62e2eb89a07fd4721a31a2ecc3866a9b06ca0d17cad97fbf0c0b46d00366cc5f1b505488383e5636b2585b86a8e0a40

    Download Submit