Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
16/04/2024, 05:26
General
-
Target
2024-04-16_30e0a582b3efe6efa09db0428d4fa8b7_mafia.exe
-
Size
1.7MB
-
MD5
30e0a582b3efe6efa09db0428d4fa8b7
-
SHA1
0202d876b2158b010c74b14c517eda0e842cc684
-
SHA256
776fc98b6ebf4f1f421d5af4dc91d08fe300d539586b2274f1933f3e8d93bc52
-
SHA512
559fbbcdecbd6e0cb74564ead834c76fb418fcb99abcb7a58c5ad3aaeba8d11d64646ebe4e046ea3e2eda6081d25d77afe8f992eb88caf236be0a6fcd69d8b99
-
SSDEEP
49152:0LWYVPTX4DduPgYh1Fw/8dR0myIuscSyNlCwWhmfP+YFicG7c37fg:0bVPcDdZYh1a/8dR0myIuscSyNwwZ+YB
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-16_30e0a582b3efe6efa09db0428d4fa8b7_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-16_30e0a582b3efe6efa09db0428d4fa8b7_mafia.exe"1⤵
- Adds Run key to start application
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx