Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
-
submitted
15/04/2024, 02:44
General
-
Target
2024-04-15_cd2c997091d887e177438b99b97002c2_mafia.exe
-
Size
433KB
-
MD5
cd2c997091d887e177438b99b97002c2
-
SHA1
a662d0059c759a9134489371e8b0dc12e13e0d9e
-
SHA256
d05e002e1e17050e9ff110d0b8a35bd62a0c76a15695338fa274b5132cab185f
-
SHA512
912774be24961c1217f6fec232d98930172b62c08baf5594534bf971bacb76f1ba0f5be7a74d3ac16f16249504e9257f80494669a04d4785475ad170c07ab009
-
SSDEEP
12288:Ci4g+yU+0pAiv+4WVGX/rlfw4xfBNjsxvJl5n:Ci4gXn0pD+4/rJ4xDh
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-15_cd2c997091d887e177438b99b97002c2_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-15_cd2c997091d887e177438b99b97002c2_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\3331.tmp"C:\Users\Admin\AppData\Local\Temp\3331.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-15_cd2c997091d887e177438b99b97002c2_mafia.exe 614694124E84EFF3305D1868FC6AF3967C9C57979BF2C7BE0D994FACDED56BF824F1F6F00EC1A3D8BAA5EFA7D5724DC24D525E5C38E5C9F122F1909F1FA188B62⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
433KB
MD5571cfc457cf6436cdd248ff8fcf258ff
SHA18375c6793424013fd4a842fb04749a1c60cc280c
SHA256a2e994bdeb28175ccbcb4d919bc57e25a99375bd18fda06416413128e169ae58
SHA512d49ceda1ded3591bf041e4b9051393b0fd4f9c69263609773d9c948ef214df670ab07ce108104a363448bb1bfd97c437758a3f4be6d03dce65ff6f1073a41a94