Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
18/04/2024, 01:24
General
-
Target
2024-04-18_03c7280b66663f1fa667727424306987_mafia.exe
-
Size
435KB
-
MD5
03c7280b66663f1fa667727424306987
-
SHA1
7f98638b0e26708b764fe5080b9a8415f2dcdf62
-
SHA256
93843d0afbdfbb7e7b7aade044ee04f475597450bc321255944a7bc82b7f01d2
-
SHA512
bed4284b49709ca163c1eb96d0e6d6bb4bdab7ef036fcdedb169a9ce47ac18d88c3d39b4367847937f5d55ee758a21308313339a90caa4b5bf022caf1b252ebe
-
SSDEEP
12288:fd4x+ePixnXQjj9POb3yNgKfXfcq5Piq8XwP:fd4x+ePixAjkeNgKPkUiq8X
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-18_03c7280b66663f1fa667727424306987_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-18_03c7280b66663f1fa667727424306987_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\EEF.tmp"C:\Users\Admin\AppData\Local\Temp\EEF.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-18_03c7280b66663f1fa667727424306987_mafia.exe 664304C48D0E67523881ED2A1229BFB45ABEB0B5ED99F53485E023640E23CA6EAEC2DD925F427B246FDB42D594A3A6052287C220D274CEEA77C02D39099B68442⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
435KB
MD57d9c4f16789ebb4a6917fee2644e15d2
SHA1797296d0f2734df245b0c1bf7b0196dfaf6332ac
SHA256204bd50b3da27e2ec957b0f8db3f0912bc1eadcecd07e8777d0ffd29ddd85d5d
SHA5120930d471a650655f917f6a4dd42e49964ac2a2c84df5a3bdebb1a04be5e59d669053ea103c562f00850c938a5758e7574c0e18857f1b29b7c2bb3cbc6243117c