Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
13-03-2024 01:43
General
-
Target
2024-03-13_54957fb3683375b615d52e9e8e5dac6f_mafia.exe
-
Size
476KB
-
MD5
54957fb3683375b615d52e9e8e5dac6f
-
SHA1
8f62c76e28f856d5b21ecaa8a9a95b8db56ea0a4
-
SHA256
04b5df1c0b9a7f798e64b0e1bf74b90975ce4a5219f566d7cb66b3527744f56d
-
SHA512
e9b135df105f39fb7af460848e3dd01686384dc4402770480c7de353681be835b319c8df9b19fe016af87e2e30e0da0b41097183cc56b4aabd4c25e8b8dd4d47
-
SSDEEP
12288:aO4rfItL8HRVEu6avwlpBrmbjKGYYB7K9wlsDpVFd:aO4rQtGRqp69f+9wlsDpVFd
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-13_54957fb3683375b615d52e9e8e5dac6f_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-13_54957fb3683375b615d52e9e8e5dac6f_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\1FB1.tmp"C:\Users\Admin\AppData\Local\Temp\1FB1.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-13_54957fb3683375b615d52e9e8e5dac6f_mafia.exe E7794C4AA95DBA233CEC5C0B2A5ADA6A4C55CAF2EDF706D0FA550AEE75D09D51A99DE6B82D3E92E92C65767BAAB96102C5216C6687276E326B9A1C1CBDED8B692⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
476KB
MD57ca754be4ab0c4a7318c66e2a21e8a43
SHA1256fc797c848af3850490cd1418b228cd5a65f0e
SHA256e8a530f7d4f58ba0b82e30fdcdbd9d3bab19549804440a37c289ec4519eab274
SHA512da4d3738dc1154b9ba144334999a89c80fd93302ca1c5548aaf353691415fd27211d973429fa7ee595d03cac297ab50c6da49e362370b056411b1d36b1c0656c