Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
19/04/2024, 22:34
General
-
Target
2024-04-19_fdf096dd63948a214619ab3fc5c941de_mafia.exe
-
Size
428KB
-
MD5
fdf096dd63948a214619ab3fc5c941de
-
SHA1
e6a96654fa29df1123c35ad1c5ed73b6ee7872dd
-
SHA256
ca1665111225e47546d2bdece7cc62b602443edc7f8cd212200a56c348c49e12
-
SHA512
fdc352bf5c8199f3cfc0a0c2f851d492182dfda58ed2e62774b2e8d1899a874a20324626bc5877255d7f164e52d575922d72cb0a4fc51d0f3db9ebadc03b1210
-
SSDEEP
12288:Z594+AcL4tBekiuKzErm3mIcVq73QDG/rCp0Xsivuxl:BL4tBekiuVrMmIcW3IopXWx
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-19_fdf096dd63948a214619ab3fc5c941de_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-19_fdf096dd63948a214619ab3fc5c941de_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\81FC.tmp"C:\Users\Admin\AppData\Local\Temp\81FC.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-19_fdf096dd63948a214619ab3fc5c941de_mafia.exe C9EC24B5AD22A237F88A6C4CC2FAB829D3FDA3C5B7CE30BE7FCCD4C5F6570309DA6B749D7C95E217BA0F89F2D4199713DA207DB16A247DC873CB46D91089D3E32⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
428KB
MD5d59ef4c6573577947095ee8e56de1106
SHA1c1a2a5a67faef5e85053f082e92e931da91fa544
SHA256b98a7528da1baf96866467b32b76fe0fc6a05a7d4ae2acb1abcf976c0a3f9a83
SHA512d656145684acfd9fb65297602d73eafc22a00af79fea0585c4f8a24fbeb5a56968dd5a844174fd6dc595527b295843c99ac41e21be8868327c16fb2f4f91d0b4