Overview

overview

7

Static

static

3

2024-04-09...ia.exe

windows7-x64

7

2024-04-09...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    09-04-2024 07:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-04-09_234c5545a85c0348eb0bebe9477aef2d_mafia.exe

  • Size

    384KB

  • MD5

    234c5545a85c0348eb0bebe9477aef2d

  • SHA1

    0081a78f1910fc7ec153beaab6664ded10195bbc

  • SHA256

    57517e7302ad5332536f39e4d1faa6d649f5703df7d738e535e2c66278c5a3d8

  • SHA512

    ef5ee7f5a134da76d93779b0882e5961ed6997492158261c9bbf8af8fd261d8e625e4b6c66d51b15c53e7f4313b2a1e829f167a86563c27b2522fe20d5a95003

  • SSDEEP

    6144:drxfv4co9ZL3GBGgjODxbf7hHMi2JOQ+ae1FFoJpntT+ciYe7s1ApPhp0bVEm9dP:Zm48gODxbz+ikOQ02ntyRvTpT/mrYUZ

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-09_234c5545a85c0348eb0bebe9477aef2d_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-09_234c5545a85c0348eb0bebe9477aef2d_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2040
    • C:\Users\Admin\AppData\Local\Temp\F7B.tmp
      "C:\Users\Admin\AppData\Local\Temp\F7B.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-04-09_234c5545a85c0348eb0bebe9477aef2d_mafia.exe DD0678DC625FC9B24D45802D13256D8562CF9124A87258C645AC73A74281C082B86421BE363EA5C140EE464B9ADA07C5DBFE4531F02358A27EAB13BB0A415334
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\F7B.tmp
    Filesize

    384KB

    MD5

    d2b91124abaa9ad1c1f52cfcba7d445d

    SHA1

    ffa938609337dc10cc49398b9d124e08d133463f

    SHA256

    2fb5fd31f5281c72fd62d4fae90afd1ad7962f1e5f978c96904575a0baed38b3

    SHA512

    7bc7b8088aa78fa9f974bc8eabe6c62ad08a8f0f8225bf370ddab743d1f04c454a5e6a09c9a46e4fcf1d6add1aa176c5ac155720ac2daeaa8a1d987f2640a0dc

    Download Submit