Overview

overview

7

Static

static

3

2024-04-09...ia.exe

windows7-x64

7

2024-04-09...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09-04-2024 04:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-04-09_487ce40cf2c41f6e2f74addb8db97a12_mafia.exe

  • Size

    433KB

  • MD5

    487ce40cf2c41f6e2f74addb8db97a12

  • SHA1

    4728dd29be0ab82dc9de995b45ed4004becdfa67

  • SHA256

    0610b97a2d3cf5b6449a2deef5e5b8b4d25f7f08b6df47646b364b93fec4c87d

  • SHA512

    fbbd0b98d80f6843245b4561139ecc77a6f48f7ffa36de9b207d00d9630545816bc8139812cc69404516bbbb37d9c09365905b413bb8cfcb279dc61b8dca44c6

  • SSDEEP

    12288:Ci4g+yU+0pAiv+7+PFcHh/TNThBi0327xZeZ8nMXn:Ci4gXn0pD+6PS/ZNB67Hs8M3

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-09_487ce40cf2c41f6e2f74addb8db97a12_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-09_487ce40cf2c41f6e2f74addb8db97a12_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2332
    • C:\Users\Admin\AppData\Local\Temp\70EC.tmp
      "C:\Users\Admin\AppData\Local\Temp\70EC.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-09_487ce40cf2c41f6e2f74addb8db97a12_mafia.exe 5EF23DCA1F5EDB69FD37255E5FDE881F928690BFD6D3CB5D41E25A5C7E9A80C2965C442DCA86126E2EB15694B2C090BE0AFEA93D24537A6C728BF9CD2D92746E
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2836

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\70EC.tmp
    Filesize

    433KB

    MD5

    674d059be6744376bf4f53b8fac3b03d

    SHA1

    3bbd3dc039c68f340d9a51ccf5b2749a5c83ca23

    SHA256

    f1ee554c09f5dc0d50008668891d784f317843d72727599a7cf45e8aaa5ad987

    SHA512

    77c8d048efd103f183519d6695da4b4d8ea2e15fd2e6de046207e76781a158f5ea24a92b6913a4839514f59c4b6c91425ae3bb188522b3ed639c8cb2ca1ff4b6

    Download Submit