Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
05/04/2024, 19:39
General
-
Target
2024-04-05_b6ed33c58ec0fa5446e46a73a66abf4a_mafia.exe
-
Size
433KB
-
MD5
b6ed33c58ec0fa5446e46a73a66abf4a
-
SHA1
744258e60fc34b33ff0fe1f21cd702558a228900
-
SHA256
05f29ba57fd3783cd47cb33d84a22f39bfa7c1d112e81450cb2882ecc425c762
-
SHA512
07c4b3d10be0effebbeaa311911e44299eb16433232c2fecadbef2ff15b049357b90069e8b6aa4442412e4c67c19a47669e55780b185f0728561e50410d77d9c
-
SSDEEP
12288:Ci4g+yU+0pAiv+C4pLG2fJpji/2beiBr+gKlFn:Ci4gXn0pD+jfW0+H
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-05_b6ed33c58ec0fa5446e46a73a66abf4a_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-05_b6ed33c58ec0fa5446e46a73a66abf4a_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\85D3.tmp"C:\Users\Admin\AppData\Local\Temp\85D3.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-05_b6ed33c58ec0fa5446e46a73a66abf4a_mafia.exe 766B5B92462FF69FBE740471C0468BA567A0D145EAAF068A8ED99F054BB2398DDDBDCE5C0F29E80F1DE3193DE61C2A45D94933269F8FD070593767A8A271C7ED2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
433KB
MD50dd7b10cf6225e9aff0a5a1403be1709
SHA10a9c1bf27d0394175f6461b40b65b0da23b6ff14
SHA256ecd7fe632de02d95313cbe64c33408026c1ed0a37f5e6d1df65af59b55288fe7
SHA51213520f880e012d09fed2e82196bb26517964bb3fc681ae5bf52e8fae52656b5d25320e4222b2e09e16a763458978d9e548f729124bbe4a1ca9ef35fb90d301dd