Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
21/04/2024, 14:28
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-21_42a0f71a0dafd6182bf3c3084b4f2c80_mafia.exe
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-04-21_42a0f71a0dafd6182bf3c3084b4f2c80_mafia.exe
Resource
win10v2004-20240412-en
1 signatures
150 seconds
General
-
Target
2024-04-21_42a0f71a0dafd6182bf3c3084b4f2c80_mafia.exe
-
Size
360KB
-
MD5
42a0f71a0dafd6182bf3c3084b4f2c80
-
SHA1
73da6ec4bd5fb91f13e3a27850e978dff9a3f047
-
SHA256
fb1d41efe532909a58476ef51e2b85ec4e8b343c7b640be590488cf0568decf9
-
SHA512
3032e2927201df1690077021ac84d86c33c17d9a967b3b163f7f9bc8a4de42d46390f64879e7eba337a9f16bab0d494c1727b9287bf0fa526b13d0653197b298
-
SSDEEP
6144:rjkHB+phBetnZusBrAnPmOXG5NCv99DDwT+Ixmyjc/lE27rhEF:roh+phBehZVBAnP1XMCv99DUCIxmyjua
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1164 4788 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-21_42a0f71a0dafd6182bf3c3084b4f2c80_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-21_42a0f71a0dafd6182bf3c3084b4f2c80_mafia.exe"1⤵PID:4788
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4788 -s 3882⤵
- Program crash
PID:1164
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4788 -ip 47881⤵PID:2708