Analysis
-
max time kernel
117s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
11-04-2024 08:44
General
-
Target
2024-04-11_7bbbcbedc1836afbf9d6d8dd381cdc04_mafia.exe
-
Size
486KB
-
MD5
7bbbcbedc1836afbf9d6d8dd381cdc04
-
SHA1
1e17d9845ef2485544bdbb3351189fc4d3be278d
-
SHA256
82025b8e7358eae1d4b18c1edeb8784793c2b3581472002318b309e4a382d493
-
SHA512
e0e9a06965cec1bad1e00f3b0377ae54a4105169d0b78d5c2d228483b73e62a92ba0cc3ead1a20c311dc8dfb834899835d4c5bc21d50f2568a5a65f03ce2f761
-
SSDEEP
12288:3O4rfItL8HPy8AeaCvdoSHnUDEMzoSPOQ7+7rKxUYXhW:3O4rQtGPuQySHUDEyoSPpy3KxUYXhW
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-11_7bbbcbedc1836afbf9d6d8dd381cdc04_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-11_7bbbcbedc1836afbf9d6d8dd381cdc04_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\3EC5.tmp"C:\Users\Admin\AppData\Local\Temp\3EC5.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-11_7bbbcbedc1836afbf9d6d8dd381cdc04_mafia.exe F1724DED0CE7E1214BCA613ECC9E266179024CE027F2BF865A834D428DE7A84D199BEEF28C74DEA6A236310BCB606248B81B1CDDF54CFB97FDF5C7718151DF152⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
486KB
MD5adfd38f52a44b9a1f5db3f2cf488e3b8
SHA18af3b7fbebefb0152a79dae5c657e9d40a397e75
SHA256fa736982b0b5c1aa72ea207fc2eb84b7d650e5e0f980c4d4600a263b85bd89c1
SHA512a74863bcbd96b41e01dab8c2f776385aba4ee35925f15204fe4424779c9c07c8e41ba11ee1c4726ad5cb9ae2992cfc7b2e69ffb1cad7e57c18011640435c23ef