Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
09-04-2024 03:34
General
-
Target
2024-04-09_20bfcd929f5115037a771d4ba09be14f_mafia.exe
-
Size
435KB
-
MD5
20bfcd929f5115037a771d4ba09be14f
-
SHA1
77b9344ac665c08a420f083fc4904de1ace7a9bb
-
SHA256
bedc0be42e1ae96bbfba3ec7246637257deeea687c398301b91f21cc74e6670f
-
SHA512
f1c28b3dfee830fcc8ad640d4819516da3e91871bcf463642bb5d7e522a35a9c01d37e7b8aec840d66f35a6aa093c37c4ec24edd95e0341e0e6e192ba2a1f0d9
-
SSDEEP
12288:9W4ufepiqKQ1mMwq+5tUQzVDKOvcVkMb4qn9J:9W4ufepiqhmFqQFrvdMkq9
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-09_20bfcd929f5115037a771d4ba09be14f_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-09_20bfcd929f5115037a771d4ba09be14f_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\1F72.tmp"C:\Users\Admin\AppData\Local\Temp\1F72.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-09_20bfcd929f5115037a771d4ba09be14f_mafia.exe C86B21A00CF8D6A4659DC83366825D20ACACD56D6B71B720E167A71D45AB6C57DEFB56D39D7C129DCC20F7C14AA9065DBC110523AB479683E36DA3F0D80605812⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
435KB
MD54155c2723b5e410e527e8ad13a0caf7e
SHA1aaf174448ee46b5e126458e9ad7b326e569dc331
SHA25685609176df738247cb32c7b774420955a086bed619fd1f82f8e397051bbf7a5a
SHA512ada5c1474c4dbac4e1dfb723aad02cf9ecf94573baa60551a705c55206ec4244702709af68da50dd6150afb036f7759c18d65431f748cc05d9f32ed2cb12751a