Analysis
-
max time kernel
120s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
19-03-2024 00:27
General
-
Target
2024-03-19_092a9da8179ec480e7f86d9046ef3230_mafia.exe
-
Size
479KB
-
MD5
092a9da8179ec480e7f86d9046ef3230
-
SHA1
4229df96a6add557c0f96afad992c2e48e8c557a
-
SHA256
23605746abcd918691b6ace36c8bdb96ee312f92b0712e9c007c5736b0f00e52
-
SHA512
013b497260889c98a15b85f106a6a2bfb2a48ab5206f8b94d2533a23c84d911a226cc029a6d143eb9a3a6f4aa1e55681390ca7aa240432c924a5b5d53e6e16e2
-
SSDEEP
12288:bO4rfItL8HAJ3Oc/goo6PGOfunX5Rf75UO:bO4rQtGAJ3OcNo6PxuX5RfVUO
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-19_092a9da8179ec480e7f86d9046ef3230_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-19_092a9da8179ec480e7f86d9046ef3230_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\9AAA.tmp"C:\Users\Admin\AppData\Local\Temp\9AAA.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-19_092a9da8179ec480e7f86d9046ef3230_mafia.exe DFBB77B54A3AA2E2C45489902C3ABC9E67F73222AFE35539445B1D1210F53C3895FF26795EE0F44708F0728DDB7B082EEEA1131C5ACC70C542ED50E73F1026CB2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
479KB
MD510755eb2d42b8b329d02f1bf4f432c42
SHA1f4acea9d6b5f3f472e1b82248e29521f80d580f6
SHA2568a0a1bdf5a45e5a99cb2a317d11b2add391f70f53dbff3f81d59497479d53ad1
SHA512fe29297de331a7af03b8377286f80f26d32b77fdc589ea2b99424ef84ca5da02653b7d9e1df123f43606779a934db2e24bf4eecce0b8ef011adb2b1b97ab1346