Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
16/03/2024, 04:50
General
-
Target
2024-03-16_91051923a4defd388a334b617188e8c9_mafia.exe
-
Size
428KB
-
MD5
91051923a4defd388a334b617188e8c9
-
SHA1
7320f9d84f8262aa73ef5b1682327e74d35a3bcc
-
SHA256
ecc4ed95c394cab88739227bfeac27100f18a6a6d3baf64124ed13d3b4efe3a0
-
SHA512
f56b78a5c6f5776e009da509a655281e739834c5c989796d1d5a6f9b4e5d165c0fe1adf58347bfdb982db2eacbbadad9f3f0f59e7f8e6a9b61b7e67caddace7c
-
SSDEEP
6144:gVdvczEb7GUOpYWhNVynE/mF4NoQH88lRnapnfgUSC/bxGkb8W6o75RukG6qHR:gZLolhNVyEJNNH80S43Obo8f6KA36qHR
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-16_91051923a4defd388a334b617188e8c9_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-16_91051923a4defd388a334b617188e8c9_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\4402.tmp"C:\Users\Admin\AppData\Local\Temp\4402.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-03-16_91051923a4defd388a334b617188e8c9_mafia.exe 4CD84F3694748DFCDC77AC3DC87D5491F10FDFE8F8624A80500D3C4359AA1EE193C52C05491BC4125122835FFCC7AF9E447794E90496D55EB781A2C96DA8F6222⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
428KB
MD5cb49ef51ab0fb41bfcec6f6ccc2df6c7
SHA1baea76e1898973585fd3ef05e1502d15d2bca364
SHA25600403b363860820b81bd796a7aaf5bfdc2ca503511a6e794b3ff2608de5c31ed
SHA512a7cfe6544a961b2f9f7b7a7151d008e98bf64513581492744a565c47474313c53b6ba8d7d53c1b4ef5cd688f71567c707a7bf5d77f05ed2c9c61498ad25ae8aa