Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
05-04-2024 05:51
General
-
Target
2024-04-05_de1d7aed82e158a1c9085d9cfa79c967_mafia.exe
-
Size
476KB
-
MD5
de1d7aed82e158a1c9085d9cfa79c967
-
SHA1
0464b3f3687d7161bc33f52ef59ce821415e7c1c
-
SHA256
47cf08b122c9c43b25ed4d7c0050a413eb7ecfb956b63c291fe1e0f87af10592
-
SHA512
eb7e80a23b06f38ef6dc7de3e4078ecb9b6b422e155fa58d3983daff0af05a155de4367196ca9d614cb08bb5c875d35478ec7ea200926b632598bf62f475411c
-
SSDEEP
12288:aO4rfItL8HRuHRLKmi4Zwe785Yr085GDI5+8gJpXew7K9wlsDpVFd:aO4rQtGRIwe785YpiIKL+9wlsDpVFd
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-05_de1d7aed82e158a1c9085d9cfa79c967_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-05_de1d7aed82e158a1c9085d9cfa79c967_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\4E7E.tmp"C:\Users\Admin\AppData\Local\Temp\4E7E.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-05_de1d7aed82e158a1c9085d9cfa79c967_mafia.exe 22AC361DD8FE9A0F2E6B178BD24C2FF4FA69235AF3C3C1D41236DA3DA873821DD3C12A6EAB5CB5E40F49022D394D73E2E61ABBD59D253D1DCD375A79FBD208D22⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
476KB
MD557cadc96dc9e1bf891a049c54b8f6c80
SHA1d05a12b13151a89a97cefc98b2acfe1a217de45a
SHA256a45b98e28b819e9a85c54ff254d230747092cc3536382cec9dcf798e6ed68af2
SHA512a0c156bcebb047d52f56c38cf137992148aedc822f7ac3a89752a8603616696675c336bfc452c00f28f1c400731808fb3696706753aecd5a348c5a2cdd46bf11