Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
11-03-2024 18:30
General
-
Target
2024-03-11_2fd3056fdc181be25c5fcec24443c68b_mafia.exe
-
Size
435KB
-
MD5
2fd3056fdc181be25c5fcec24443c68b
-
SHA1
2a29a56ea61d202aee1713ec7b02131287426318
-
SHA256
9621dadfcc695aa51ead206cf0b226c7015d776d175c61497750567c4ed9e523
-
SHA512
9dfb985dc3d1b543c93f91513fc4e9863a65953d8f4366fd1d2ccafa16499a41b22194a13c7b0ad5152bdfb45498e6f8f4716ae0350ffa38286f01c135316761
-
SSDEEP
6144:98Xyq4o4aRCTuuqepiq+zQ1mBYBub3i9yqAa3gjfizVd3t22/T2+6t2TYK8OzqVX:9W4ufepiqKQ1mquaUI5t12m8OzqGFJ
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-11_2fd3056fdc181be25c5fcec24443c68b_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-11_2fd3056fdc181be25c5fcec24443c68b_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\196A.tmp"C:\Users\Admin\AppData\Local\Temp\196A.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-11_2fd3056fdc181be25c5fcec24443c68b_mafia.exe 0C1DF83C336083F996D967B3A9003D7CBAE3947284443F1086EBAFA110CEFEC9067D8E86FEF10302C94CD68F81EE4136007540B26A823BF0F588994A23BE29552⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
435KB
MD5e6c11081deeb7dbb6828402dc57e3689
SHA11cc4a9080555a3e2d04fb4ae45ded480b09ffddd
SHA2566f2d538bb39dcf31d539f910ae5c778607af987b94345c243489f32d4cfc0235
SHA51254f4ff7e568380ee15d5a6b0f9f85150898024e7f5cc5641783d21c2f833b09c32b6cbc90ba91ba555848d6672f1534e263cd712d3e6daed0a1016740d913e84