Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
10-04-2024 04:00
General
-
Target
2024-04-10_dfc0c89ba18c97597ce621e9f1e213d0_mafia.exe
-
Size
441KB
-
MD5
dfc0c89ba18c97597ce621e9f1e213d0
-
SHA1
3151f9fb8394b136073892500af13099ddf9e497
-
SHA256
8fe8eb61f19c7ea755461ce5e42741e9962503888419508d74470d6bbdd6ecc1
-
SHA512
79fe31e4072f509c2ae6827d3ebf5b2187cdc8c3896836dc168dd68f190b80d16097b787abec3a9142d7edecbb12cb788e534980ee2dccb4be379670cc76c017
-
SSDEEP
6144:6ajdz4s4mDHq9OXpOd0p6Jiv+vtv0/m9NoxXIVImxEO7KaR9mLrGdlbvBX3y5ayg:6i4ET7+0pAiv+fWXeIYFztcaz+Jc
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-10_dfc0c89ba18c97597ce621e9f1e213d0_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-10_dfc0c89ba18c97597ce621e9f1e213d0_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\602A.tmp"C:\Users\Admin\AppData\Local\Temp\602A.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-10_dfc0c89ba18c97597ce621e9f1e213d0_mafia.exe ED1D1ADBB145839BD199991C47671686589B79BACA24700ACB0537A70286434BBA95902BFADF338687FF7F76DF73230A8593E338D6469F4B5F124307D8F128172⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
441KB
MD57637fb5c869b93dd4cfcbc2247f04e39
SHA1957ffcee8f427c93274dfef051e4b7947bff916c
SHA2562392f844da66d5dd65cc00b3bf66b22fea1f0f3e9712d79222ed429724ff0ff4
SHA5125d3a0061dbffe865a4aadf0c8a1382def644de79a4ceb887b3770356dde021c91c4f290c3703ef00af46247a5715eff4784b85bb1ba0c20166f5ea7eb11012a3
-
Filesize
476KB
-
Filesize
476KB
-
Filesize
476KB
-
Filesize
476KB
-
Filesize
476KB