Analysis
-
max time kernel
149s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
26-03-2024 01:38
General
-
Target
2024-03-26_86aa49c423a7ec95fa2d5f098a3c9ea1_mafia.exe
-
Size
428KB
-
MD5
86aa49c423a7ec95fa2d5f098a3c9ea1
-
SHA1
786ce2570acf068d79462fe1c60a9d50707d039b
-
SHA256
441d6b55370f634c5ff71ddd47547712977ca18633924b6c315dfe89c29f128c
-
SHA512
6f7d589e1e20aa611db1c95226bb1870fc49ce9b6487aaf4a91d3a11093454c12d23eaf3b0343dca5ff39c195fd30297c6c2c7e228d724a108e6a609b6aac618
-
SSDEEP
12288:vR4I/YeaPjIHow/gyoYuvp5/vDNjE9VJBH:vR4I/YeaPuoggxhdvDeVJB
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_86aa49c423a7ec95fa2d5f098a3c9ea1_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-26_86aa49c423a7ec95fa2d5f098a3c9ea1_mafia.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4160 -s 6282⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4160 -ip 41601⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB