Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
26-03-2024 21:28
General
-
Target
2024-03-26_3d6b5849c59634a493e23b886b074df4_mafia.exe
-
Size
443KB
-
MD5
3d6b5849c59634a493e23b886b074df4
-
SHA1
cfc1e0474140b1b4bc7e660859c693aac05f81cf
-
SHA256
3d85acf02dd0d780d78f6f75dfcb9b12a02cb32c636334994a133cc3191fd010
-
SHA512
0d74a9e5cb38efae50626492f02f16e93f3bcca4134678fd5506a59f2b06b4a27ef9c14cfe971120f921c12a7479c289a701d8b0c65edda03e70145df62e4707
-
SSDEEP
12288:Wq4w/ekieZgU6AQAu4MF1dN9wTbmaCmdsSlMa:Wq4w/ekieH6A9u4w3/md3P
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_3d6b5849c59634a493e23b886b074df4_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-26_3d6b5849c59634a493e23b886b074df4_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\259A.tmp"C:\Users\Admin\AppData\Local\Temp\259A.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-26_3d6b5849c59634a493e23b886b074df4_mafia.exe 799DEC50989D32139CD8698370C433C4D5A9D8D434911C9BDDB08570464D5190E43F1CB14F145D678BE684C05C72A910706587B05F3C0EBC45CEED73E84208382⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
443KB
MD5d8a1d7f8b2ef916662d3efa8f45225fc
SHA18313879b7fb6bb809eb09b9ce6292c029bb0ec49
SHA2562cf3553b05a565e0b9c8596040ea2cf095077481d918ca72499d452a485d5fe5
SHA51254751332a4d22099ad08f38f71102a0096ef22aae1b8dbb83513e8b2d94772792d37a1cf750766332fdfc65a6856cf80779669aa5554fddfc74c1fcade667f81