Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
10-04-2024 04:56
General
-
Target
2024-04-10_f31255f3fed517a17a9c5bb992f20412_mafia.exe
-
Size
448KB
-
MD5
f31255f3fed517a17a9c5bb992f20412
-
SHA1
493865858a5206091c2351d4726b8d1ac63f2c67
-
SHA256
e10103673d4db000b1567fa6858feb2d6c4cc4b0676944d7820b0f2bdbf0d152
-
SHA512
5e3284d54165f9dc71d498146b1b9fcc377efce32e151a75ce7477da7ecc1372925064c480c3b2c6a44758fa23a99146156cebbb4340493cde1293669f71b66f
-
SSDEEP
12288:lb4bBxdi79Lhq0Rg99bHuy/vYHY0mqUyDc2BJP2B6A4:lb4b7dkLhBR8ts+qUyfJv
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-10_f31255f3fed517a17a9c5bb992f20412_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-10_f31255f3fed517a17a9c5bb992f20412_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\1D70.tmp"C:\Users\Admin\AppData\Local\Temp\1D70.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-10_f31255f3fed517a17a9c5bb992f20412_mafia.exe C06837BAFFEF25DFFFB7263A70E7C8AF2B8D3D30AB29C2934D0E12CA131DC23B1D1789FF467B20EB86137C089EDEA02E6215E44B8D8C3EC41EE72F98DF08A65F2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
448KB
MD5778e35a8f4c56c6dae3d790f964eb2e8
SHA10e8454a00892cdf8f887092bd04c0806827d8530
SHA256cc92c3c2e67fb864c0992b4c17708e250e8e26a7ab59826c718dc1cd5d21f496
SHA512a948ea53c2cc8fe05bdc08eb0abb2d6c04b9cf9aa11b7f270874abb31a7ff6a69ceaeee4debcbed3493a23c8849d7b7fd1e0552135144fb56c34e5d9b61ca272
-
Filesize
484KB
-
Filesize
484KB
-
Filesize
484KB
-
Filesize
484KB