Analysis
-
max time kernel
117s -
max time network
136s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
28-03-2024 22:32
General
-
Target
2024-03-28_63d651f99fe0af7f6d15f6506bd1279a_mafia.exe
-
Size
412KB
-
MD5
63d651f99fe0af7f6d15f6506bd1279a
-
SHA1
02ab3021fc63754b6c6d331eab4968e6846381a0
-
SHA256
4c8d4579fcbba1431a8178905f56ec72aae1bc1d76241c12caee2775dca19b78
-
SHA512
da8fd0c5466a4a6405bf7ec634ad6f1831e963d26df64485bde66f8ec2aea459ec83660018ef696523341462aa02c25dc6a308bb2c49a2a244ab79ea8b110dac
-
SSDEEP
6144:UooTAQjKG3wDGAeIc9kphIoDZnia0jJ6/iqVe+Cs8rmakqcdoP:U6PCrIc9kph50jJIVsstc
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-28_63d651f99fe0af7f6d15f6506bd1279a_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-28_63d651f99fe0af7f6d15f6506bd1279a_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\B461.tmp"C:\Users\Admin\AppData\Local\Temp\B461.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-03-28_63d651f99fe0af7f6d15f6506bd1279a_mafia.exe B55BFDC2D030DF7CB21F40E21D509DC67D6851D3433AE76C94C809E3017F96FC3EE3F58D178B804A828A72D24A980BA1937F93D2E3B1799AEF61A47F38C113D22⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
412KB
MD5e15fbe41b0c525fecdad47185befe796
SHA13f0d4d4a86a456f1489268a629c5593c821c5dd3
SHA256293b9fed04921cf12995fa758947cca600f3e22231b7113dfad919797674b566
SHA51299d068b1ac5f4417abc23a5d460693f821a5bf7cda897a24070b50392e892b6cfdcdf6a771badf8f43131fe64a1349685c6f626beb9789c8f4bc57a93afee091