Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
12-03-2024 17:32
General
-
Target
2024-03-12_4b303a0fe940116100029e4f0d3af8a2_mafia.exe
-
Size
384KB
-
MD5
4b303a0fe940116100029e4f0d3af8a2
-
SHA1
bb22c8250d7e3fb5808a5b5bbafa82768adc41be
-
SHA256
4b4e31555f3d1cbe8d1750b38fa8c737b2a32f27d65ee2b0ac69fc386176ac2d
-
SHA512
55bbf975d4a0d8162a6ee7179e3667683752015a7ec2e22d36be7f27b7a88093d874362399e161a6884457f332832861399173c6807a8248c9ebd19345cf51fd
-
SSDEEP
6144:drxfv4co9ZL3GBGgjODxbf7hHyTMqAF9ZJ4KFT9cVyGY08j5rFzZ:Zm48gODxbzIdi54KV9KCZ
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-12_4b303a0fe940116100029e4f0d3af8a2_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-12_4b303a0fe940116100029e4f0d3af8a2_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\4A2.tmp"C:\Users\Admin\AppData\Local\Temp\4A2.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-03-12_4b303a0fe940116100029e4f0d3af8a2_mafia.exe 04ED610391D8D399D0C3F452CC352FA62AB61F2AA2F8F0BE7B80B73D873D6D76980A529462BE4052715BB0E9D4222FE937F4414D5C7006F6DF0D53D311C29C772⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
MD5ab60c03de028fcc7e7a71f4bcbdc9bf8
SHA1e3a801e7f28798bd122899f4a42087c7d1a1bc9a
SHA256f96a30666abbdfaff5761469f86badcf80c2488c5bb3d44e9f2b1dceb6f5583b
SHA51222506c300a8528457cdf9233321d025bb6ae35bef638ff9b252c4cba472d31008330b95e2fd5f5bb60b32daaac7c584aa32a2c2f5a18c92a248fed4ff1f89677