Analysis
-
max time kernel
118s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
06/04/2024, 13:31
General
-
Target
2024-04-06_4e900cbcb6135d0e0bf10627642924f4_mafia.exe
-
Size
444KB
-
MD5
4e900cbcb6135d0e0bf10627642924f4
-
SHA1
bbae4c2f6d9ecae9545133c89a804d76df0b584b
-
SHA256
e3f63a46ee59f5265f5834e5dd00e4dbac08b703ebbbe4add8144063327ef830
-
SHA512
12f430469dc29ee74fd3b88c1f23740eb4fd40bdde4e549cccd0375cb8d119ce6593063713bb863a486109541e4e54e6611258698bbe0d96bad6107fc6a50edc
-
SSDEEP
12288:Nb4bZudi79LXa5Gmbx2h3zL0Z3TE30I4QFA:Nb4bcdkLq5G13eXIT
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-06_4e900cbcb6135d0e0bf10627642924f4_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-06_4e900cbcb6135d0e0bf10627642924f4_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\C64B.tmp"C:\Users\Admin\AppData\Local\Temp\C64B.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-06_4e900cbcb6135d0e0bf10627642924f4_mafia.exe 74F8F8C32956C33ECD4144AC9CB72BEECF72CE0B3747EBC793271107368968BCDB448CFD5AF2687CECDFE7C6C6FBA637853EBB75CC4F823243E9C6989429DBA12⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
444KB
MD5cbca754025901d88138b78213b992bce
SHA122d9b0569f12b452d09bc9d335cf962d7cbba182
SHA2563279339a4bfb9b545f9e237b6988e3bedb72822c057a9fb25af2af3f44ee16e5
SHA5120a138978e7417583785b31fd3756855cfaf110605ff4d2d3733a7ed44b3cef107f2fa59e970b72f196e10a01adb86921ccbd6ab92fdf9693816032e227806a88