Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
25/03/2024, 12:37
General
-
Target
2024-03-25_4a449908e6a4774ef7a918c3e1cea6d5_mafia.exe
-
Size
486KB
-
MD5
4a449908e6a4774ef7a918c3e1cea6d5
-
SHA1
2025eda7724507300013f78659c1d682c2205949
-
SHA256
0b06dc1532cbd54bbc489e64b48bcc5ec35d8b05b5d63f203643044daa528ba5
-
SHA512
aff8717e2790acfda8b45f4acde3d382012bbe74331867bbd3bba7ddbc299b6fae3fc4fc79a0ac1dcc1b61404b12b45b027bacc004fd40ad173f236ab8228864
-
SSDEEP
12288:3O4rfItL8HPKTe4r0EX6GLmaEEJgOi7rKxUYXhW:3O4rQtGPwNYEHy7ENi3KxUYXhW
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-25_4a449908e6a4774ef7a918c3e1cea6d5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-25_4a449908e6a4774ef7a918c3e1cea6d5_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\BF2.tmp"C:\Users\Admin\AppData\Local\Temp\BF2.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-25_4a449908e6a4774ef7a918c3e1cea6d5_mafia.exe 0B717941B0D678F0C44C22D110A89AFB3D73541965A7627EB1AC1D241231B828D1038E66E55D12985D406CE7F7E9F9F92DF2D87D2C0F92F2C8E199D2AB238F492⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
486KB
MD5c79f940d010729467c1d42eb4e5689a3
SHA1dba5bde321bd94d81235873fc96b8ef691efd973
SHA2562967253f232438044d2dc94ae21c0a00f57fdefb9851ad18badeb583b9a8667c
SHA51255917ccefa9f86b3d21b4a9abba6d7d8298b3ef7fd2ca950aeb8bdd3e646491e61c521b8248bf9c03b1510acb89c546150261c8c0dca587f1ffb58d3bd5ec4b0