Overview

overview

7

Static

static

3

2024-04-20...ia.exe

windows7-x64

7

2024-04-20...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 08:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-04-20_151a6e8b7aa7ad9876438c270ac875c5_mafia.exe

  • Size

    473KB

  • MD5

    151a6e8b7aa7ad9876438c270ac875c5

  • SHA1

    cf93b62f5d0e83957117586054d76d65f06ebc64

  • SHA256

    09b55666e1d99cbdfd7987d1f8a828ba9156a6a6224471839abfb4c7778c2567

  • SHA512

    b120ad9b0aab481d0621ea3bfea0a1d0d1eb795c859f1778df9c65693e0aca0d924a0adf8bbb37ae0aa0fef0949002dc9a8d96b8dd493d231a2813413e80fc70

  • SSDEEP

    12288:Nb4bZudi79LarzGi3ByyJkiwIZjqO5+Js23ADuuSA0a:Nb4bcdkLa3GiLkiwUj7K3ilJ

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-20_151a6e8b7aa7ad9876438c270ac875c5_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-20_151a6e8b7aa7ad9876438c270ac875c5_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2212
    • C:\Users\Admin\AppData\Local\Temp\11AD.tmp
      "C:\Users\Admin\AppData\Local\Temp\11AD.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-20_151a6e8b7aa7ad9876438c270ac875c5_mafia.exe CF976A58895DF2FB04A21A03B234ABEFCB88A61E0422768E400169458816E1DA57DFE50437F7BB5C20DC1A8ABB750AF3E734DC5657629D55EEDB737D405F7EE2
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:1712

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\11AD.tmp
          Filesize

          473KB

          MD5

          3f89de69483b27e0db244a39083d8a01

          SHA1

          2a59eacc47b902072eac1152db8b2ed3d5344e31

          SHA256

          7d6f8dc4697600ac8e35d2d4e9117edacd9ff8983ef6513cbd83faf24de95c0d

          SHA512

          c8937405a52bd3f46c85f5601e4134dce678d366a4a507e886c87885a24a7a4241a04718e282a09f8aa820a74e8594ab6b779a217a1cf4b406ee99bffd0d89f7

          Download Submit