Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
10/03/2024, 06:30
General
-
Target
2024-03-10_dea2f56adc7ab69b3fa087e53076a618_mafia.exe
-
Size
486KB
-
MD5
dea2f56adc7ab69b3fa087e53076a618
-
SHA1
e28b380d3b1c90f0a3562f349ffc2c0854a607f1
-
SHA256
8c375bc8912645199fc2ef1fd6c43770a193fd548219be92a27addf45459291c
-
SHA512
be83099eba614bb8db54b47318f2a363c8565c3ae48ebf3a83473797b3abfa9e72d3d7fa9375e027cf310b6e0b54ad6894cd70910ec96a3495bd6152dcbf8cdb
-
SSDEEP
12288:3O4rfItL8HP27LX1Ghwx7Rzz26PQ7rKxUYXhW:3O4rQtGP2qwNdS3KxUYXhW
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-10_dea2f56adc7ab69b3fa087e53076a618_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-10_dea2f56adc7ab69b3fa087e53076a618_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\12A6.tmp"C:\Users\Admin\AppData\Local\Temp\12A6.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-10_dea2f56adc7ab69b3fa087e53076a618_mafia.exe 25C67BE99AE3703A5E676BF644D23614AAC3C785690E239DB19F0E3FEBFF4C83608C3E4C601A873A42E4F56FF8C8ECA8F7E0008AF06B7CA6370F8295F1EAC06D2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
486KB
MD599f11685b24b02ad0f030eeba08d1719
SHA1b8aa1d5ac582cff34d5f3134c2f8099a2d86e8c7
SHA25612ae24ccec4aaeec0271f806356c7aff7815c097d63ab58f03da0c4181df23d4
SHA5127f88a92277bbd984dedfba4fc52e12d67c128df4b08848d7b4197bdf1711e9002204ff77488872b1d6952407d501907045af43f5e011227780a0ff723474d77e