Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
09/04/2024, 08:47
General
-
Target
2024-04-09_486b610f6518f103a1af6eead6c5442f_mafia.exe
-
Size
384KB
-
MD5
486b610f6518f103a1af6eead6c5442f
-
SHA1
18e47bde13decc1e78dcee68e6bf302a6f2eb51f
-
SHA256
7f0e167d33901c5d3862e38eb9637f5dcaf1942e14015b54b28aada150956b7f
-
SHA512
406bf569179df92b1ba7533906795ae8d9c906fbc032e850b133dd630de457fc13c514801673db51c2bacd95e3ec80391c7591d4fc07123fc41bbf3dd7e64da8
-
SSDEEP
6144:drxfv4co9ZL3GBGgjODxbf7hHyiEnaIjrxbTGZQISsnNTmWX2ixDEZZ:Zm48gODxbzREnr3GZQI7nNTmWXrFaZ
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-09_486b610f6518f103a1af6eead6c5442f_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-09_486b610f6518f103a1af6eead6c5442f_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\13BF.tmp"C:\Users\Admin\AppData\Local\Temp\13BF.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-04-09_486b610f6518f103a1af6eead6c5442f_mafia.exe 57506222737905CB88AE8DF0EAE0A2FB5222547F4BEFD04D8A9325C711698C68BBB9198B129FE82EC1EFF9905203B11EB178F351F67685C6E503631212C8B4842⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
MD511375c7e7a3350c8f4a9e14c7e339c14
SHA1c9405b3f596d9ef0d3f1a78f9a53d6a06d270267
SHA2567f79f3d72ba91e1eb24ade1f6a3c6b0da21fcd41faa5948bcdcd9a7ba79f275c
SHA512aac199aecfaec943ea6ec3c174508e858b97552514a122a7985934074f7e0423a3d686253cf04a990edb9e7661227595423b06843c953f46028c48b8cb7c106e