Analysis
-
max time kernel
117s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
15/04/2024, 20:42
General
-
Target
2024-04-15_633f97d06c7082837bae79f2f096c09a_mafia.exe
-
Size
486KB
-
MD5
633f97d06c7082837bae79f2f096c09a
-
SHA1
ca8a48085628afc64bff17ac31b169d54f74910e
-
SHA256
80ffc5138941dd1bb5fc3ecca576db371aa4473c2d0b42dbaf08d84edc42dbf5
-
SHA512
a32b1f86517afbb34818dc1074e01feb11142d41ba6e90cceef55cd840b8a1cf3cb794b4753ef629715c5ad404bf0bbd5baf4925db91c687c91fc9ce7460614e
-
SSDEEP
12288:3O4rfItL8HPEVxqEjU0rPu0oAZ1CeOxcK7rKxUYXhW:3O4rQtGPAxVjUguuO2K3KxUYXhW
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-15_633f97d06c7082837bae79f2f096c09a_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-15_633f97d06c7082837bae79f2f096c09a_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\3DAC.tmp"C:\Users\Admin\AppData\Local\Temp\3DAC.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-15_633f97d06c7082837bae79f2f096c09a_mafia.exe D2104FE664737F08CBCC2953EBF74B72AD5C959B6869C7E59B46C65C537516382B9E5F07AB82C4D7CE8F792519AABA7AAE7F6BFEB40D5AC383AE2DB33E504B812⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
486KB
MD5f12b6fe6ed9e2b04197215aaca91e64d
SHA1e7d655499ef46a77d991c4ff6ef04a59f4f9353a
SHA25664df8f721a41486d3907c1c9a8e69355cdaeec12c3fb2bc3d38c92077ce4d8a0
SHA5127fd2ac25da59011bc312fc2bca5180697bd859a8add909c4b333d081f6fd481e39a3f9f5d2b82a993d879c370bb1eb73d883e456050c9da3df6ce38ae167138a