Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
05/04/2024, 00:46
General
-
Target
2024-04-05_8e71220561a4df5b2dabdc11b80f0611_mafia.exe
-
Size
479KB
-
MD5
8e71220561a4df5b2dabdc11b80f0611
-
SHA1
b20435a2d992df84803cbd0d517b04a6ab603250
-
SHA256
16945dfc6a12d576d240c4afdf207df5d19fef3cdb7363e9576480c07bb2ff58
-
SHA512
644f67bc9ba35aa12fbc765c54896355e8130c1e8abbc9a2c0b10648f0582e296253e284f2a8ef7b740fb84f4b91155b95b0d9b21c73cde93eeca17233cc938e
-
SSDEEP
12288:bO4rfItL8HA/SJyrw9sXlvTZrRsc/475UO:bO4rQtGAqkkyZZGc/4VUO
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-05_8e71220561a4df5b2dabdc11b80f0611_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-05_8e71220561a4df5b2dabdc11b80f0611_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\96D3.tmp"C:\Users\Admin\AppData\Local\Temp\96D3.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-05_8e71220561a4df5b2dabdc11b80f0611_mafia.exe 9284AC80F3167CE7943F0D0913C2A88F76720B988EBD8D14047234BF95FFDFD665B2A57DF5DBA5E216BDEF8D8FFF9782AC7BB0CD93469ADA64B5D5795CB531972⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
479KB
MD550dc879fba569622d5f7a59b9d2934d6
SHA1ca8ae18066283584f366509650293ae6379ad134
SHA25673782fa40c211ccf31b3324314cb6c5c25d40578cf947c1497d5de6e5c23fc5d
SHA51241b71047b856c015f5425ab22e5926f7b421f4a2b9e96fb9929adbcb600c30a185815226a7fbf544ead77d3652a63cdefe2ac045dc91967c586b0983b4bf3b0e