Analysis
-
max time kernel
120s -
max time network
134s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
08-03-2024 02:24
General
-
Target
2024-03-08_03ef70b9eaca30b1f3654f9bbf096e22_mafia.exe
-
Size
433KB
-
MD5
03ef70b9eaca30b1f3654f9bbf096e22
-
SHA1
cc40eef49058e1917823aa9ee1b0132c2213c691
-
SHA256
ce5d7524db972934536b93b045c09ff3ccbc417efff594dc2bfe2c145fefc6ee
-
SHA512
a0e7ad33b27259d44f3df41bf0546d89e685bc3373317922dea87deefe993b66b975c0fb186b60f0cba91f99004d87151b7ee9f6e70a1193cb15d986014237fd
-
SSDEEP
12288:Ci4g+yU+0pAiv+8P1TUmUJqx+1TFbLe6Lo5tNU0n:Ci4gXn0pD+8xUmUJqsbbcX
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-08_03ef70b9eaca30b1f3654f9bbf096e22_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-08_03ef70b9eaca30b1f3654f9bbf096e22_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\5D2D.tmp"C:\Users\Admin\AppData\Local\Temp\5D2D.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-08_03ef70b9eaca30b1f3654f9bbf096e22_mafia.exe 3C6F71CF4D283B371D72E40153B2C661EFC01D954D960B2491BBA5888F748CFB6A01D8449B5FE93C5B56C47FDC1D375598055A235E576DE40697B576F16081B22⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
433KB
MD57d0583f9c4b796b0b33f436042df856e
SHA141749766f7f7699175f570fcce49d37c8418c230
SHA2566aa37c94d21ff0bfc79d0fcc0b14e4d3c3414b3a3d1fb12771c48073e4d371fc
SHA5128ccd365214b99a476915b11d50499696c6954032f9d34c221cbb105f5c63653fe0e3211b33d370d9fcef2d4caacfa9e30463ee38f70370992545b428c1508073