Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
26-03-2024 06:45
General
-
Target
2024-03-26_b901416e0e64b011c862985e9d06d044_mafia.exe
-
Size
476KB
-
MD5
b901416e0e64b011c862985e9d06d044
-
SHA1
1030e77357270868b323f52654649af403fa0a3f
-
SHA256
ae729950920de73f2bcdbf82b7e2f93a5093a7cf9924ff1fa40c6a5643990f4b
-
SHA512
c55ef020569d155600a2acaef75f8b085d8a13efdf4239e92d8017cb5e08fd2132ec64f40f31eb8730b04a3e81a8625e89e2a7b85e13eb244fff149186660834
-
SSDEEP
12288:aO4rfItL8HRsYsOmFjdK+5k8Fy6eS5gXAA7K9wlsDpVFd:aO4rQtGRLpyjdNFyTS52+9wlsDpVFd
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_b901416e0e64b011c862985e9d06d044_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-26_b901416e0e64b011c862985e9d06d044_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\FDEE.tmp"C:\Users\Admin\AppData\Local\Temp\FDEE.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-26_b901416e0e64b011c862985e9d06d044_mafia.exe EB6319E00CA9B1194DF6FA174F547506710B411FA0B35FBF6D495328E0F59874F403548F717D5D6C0D2129E16DEEFBE20921FF1013D5C82F6E224381532AAD382⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
476KB
MD5f56381972d3fc329efda26cc7430e5cb
SHA100245f363ef426c17bd3a9969ed09acad62e59f6
SHA256b86e02e3ba7428c742fcdc14c2714b1cbe8b62e51671bcc2b1ba2d2ab60f9859
SHA51283181fed2d88a517cb22f3b52077edb130db9ea31ec9c91b3c9b6fc48d3c7963e070d5cf79bd6211ebe4c7733ef2ca8b2adb26c569d453756e20f95aff174416