Overview

overview

7

Static

static

3

2024-04-11...ia.exe

windows7-x64

7

2024-04-11...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/04/2024, 03:44

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-04-11_94e7ef38bd8d6e4706f44fca641fb5fc_mafia.exe

  • Size

    486KB

  • MD5

    94e7ef38bd8d6e4706f44fca641fb5fc

  • SHA1

    0c0bc70b2e3ecc1a4049a2839702fac7802db13b

  • SHA256

    3605e4cc7fc6449aee07ea150ea77d24e83239de67d1ef8c5b1ce71f70ab02cf

  • SHA512

    e89167e1599cc53df46a7666b90d3769f4a28fc4b4582f314679f70871f5a547db1125e54d2cb51520b982f324d47e47c71e68fb75f8d0fcea2048f882b1458e

  • SSDEEP

    12288:3O4rfItL8HPSmvcyavy5zPeno2aTS7rKxUYXhW:3O4rQtGPSm30y1K3KxUYXhW

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-11_94e7ef38bd8d6e4706f44fca641fb5fc_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-11_94e7ef38bd8d6e4706f44fca641fb5fc_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2472
    • C:\Users\Admin\AppData\Local\Temp\7B48.tmp
      "C:\Users\Admin\AppData\Local\Temp\7B48.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-11_94e7ef38bd8d6e4706f44fca641fb5fc_mafia.exe 1ED7F6C9B4FCA4EBCDCA3B53184F9E555B26461DE0667C5F30C81490DD6D03AED157D5643FEAD32BA5EF48330C7D66671AF71195F6A2F93AD54E069B35633A7F
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2988

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\7B48.tmp
          Filesize

          486KB

          MD5

          1c556c5f85772c5e1d145af16f5a0071

          SHA1

          0893ced3cf59ef7d9306ab1bb770fe66e7495f12

          SHA256

          a0bb2ef32de7ea525b98a0a74426049083c8d989e8dbbceceec892b07e0f416e

          SHA512

          28ebd87224022804d4a88639c34c6d4e09be03aa599dd174d537e4b23cef72cd1c1955c53a10ba866c715c6518eaa0c472016dcaa320e1dde8abf2de0c775310

          Download Submit