Analysis
-
max time kernel
241s -
max time network
291s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
09-04-2024 22:30
General
-
Target
2024-04-09_c8843800144e6b59cd5097dae3529d35_mafia.exe
-
Size
428KB
-
MD5
c8843800144e6b59cd5097dae3529d35
-
SHA1
c9c325b3387156e5fd111562f55b43b062b98415
-
SHA256
90bce085c2adbadc92392d628504ebd07d27d8dd59b3bbbf282299d5ea37d829
-
SHA512
9c876cac6916146f0c14fd39c69a496079c9b7f0ba83e33aebf172d8d926105e94cf52b00f443ec22f6475558def349a5431e92c1485c312196a134a7f993146
-
SSDEEP
12288:Z594+AcL4tBekiuKzErE6TkMdk4Mp51EUpUta3iwNJWl:BL4tBekiuVrPkr1EEEj
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-09_c8843800144e6b59cd5097dae3529d35_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-09_c8843800144e6b59cd5097dae3529d35_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\8546.tmp"C:\Users\Admin\AppData\Local\Temp\8546.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-09_c8843800144e6b59cd5097dae3529d35_mafia.exe 75957D1AF0AA842542D1817F247C4C3339A6FEDD4A5515D60FFDBE4DC2097859D501033C30F346C3DDFC124E80599D3FE2A5297258DFDB9B64EF798B09B08F282⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
428KB
MD525dae1629628f49e85f38e8ec8cb8fd2
SHA1d32d1b552dd51a907590a6136f3150ecf561a4a4
SHA256c95a4e0b129c50a24311565a950f76e7373b987bc3d5d31f386064a22d04901e
SHA51206a9380267424e5baf9941c35f86ce9105db0be25324a545eee5dbb6ee33b4d034bf88c1ac044ef9746a75d134cb9913deab789eac2c8ddbd1cecef741281922