Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
19-03-2024 09:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-03-19_4dda4afeacb4fce3b82836721f652ab3_mafia.exe
Resource
win7-20240220-en
windows7-x64
2 signatures
150 seconds
General
-
Target
2024-03-19_4dda4afeacb4fce3b82836721f652ab3_mafia.exe
-
Size
1.3MB
-
MD5
4dda4afeacb4fce3b82836721f652ab3
-
SHA1
d88c9eabb38d9d80169974818f4bd37a507f6187
-
SHA256
c4651a3e8347e89359c9ba7abb8de69bdfda78ccb9a912de77f3acfc5924bd13
-
SHA512
5b28311d7ea6e7aa51262b3e6ce0f5f81bc731fae14b2760d17459ab0f563de4025691b9b3f07b08385bbc12a1770949295178a8e0cef2325da281a5f18acef4
-
SSDEEP
24576:q6cDtdda81uqgma9kf2M9jRFEM4XlhafCLTvt2rR8FfBhRJUEbDk1ulUX:qTtTa81ugMMulFnvt2r4PRSEk1ul
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1992 2024-03-19_4dda4afeacb4fce3b82836721f652ab3_mafia.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 1992 2024-03-19_4dda4afeacb4fce3b82836721f652ab3_mafia.exe