Overview

overview

7

Static

static

3

2024-04-09...ia.exe

windows7-x64

7

2024-04-09...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 21:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-04-09_9bbeaf14d1c3cc0e77e3f26f70eaec76_mafia.exe

  • Size

    435KB

  • MD5

    9bbeaf14d1c3cc0e77e3f26f70eaec76

  • SHA1

    fb922feacebc9654f4b394da8a2798323840be1f

  • SHA256

    0b407bb8e53bffefd27aa86634a7ccc5fb9bb2781f5c95e3d6723ee2f8e838ad

  • SHA512

    15ba4bf1563983ec352eaf1f169c3c3693b9428ed01a95bcdee6fee54fbe31afdb40824e2e013bb8e95b7abc49fdab6d8e3ff96cb4760fb76f993653c0c8cf3f

  • SSDEEP

    12288:fd4x+ePixnXQjAsZF4OxX25r6VsactuGw8wP:fd4x+ePixAjL2B6g08

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-09_9bbeaf14d1c3cc0e77e3f26f70eaec76_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-09_9bbeaf14d1c3cc0e77e3f26f70eaec76_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2992
    • C:\Users\Admin\AppData\Local\Temp\163F.tmp
      "C:\Users\Admin\AppData\Local\Temp\163F.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-09_9bbeaf14d1c3cc0e77e3f26f70eaec76_mafia.exe BC1C7FF0B42EF2B83204465638D23391F65AC3BCF80FCEB1E2FB31DEEAA42477331746003182F5B119E5D7BBE607DD35D4682466382D9506E64BAF1123FA197F
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\163F.tmp
    Filesize

    435KB

    MD5

    7aa403a0b20b99d0ec81d63e593b7755

    SHA1

    8fd3528e6b9e7ee2714e1fbf0370d9383e8b9777

    SHA256

    51d5dd536b80b21f12cd2e0ae395c499a954bb153117921fec3e18cdf9f539de

    SHA512

    c458c6eb9ca298cd8f8c94f5e51c44f9d6485d9b24594b7b44d22db72373759b032b6ca98e09dd8ee75d49fe8afef78b8297438f543fb42031bb463d30568fac

    Download Submit