Analysis
-
max time kernel
118s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
21/04/2024, 14:33
General
-
Target
2024-04-21_8479a43cef11e55daefeceb8a4e365b0_mafia.exe
-
Size
411KB
-
MD5
8479a43cef11e55daefeceb8a4e365b0
-
SHA1
345ebf227fad7db2c5941bb20d5bbadc5dc6ee5d
-
SHA256
5e99e610e1c511867681327afbb18f1a16a55beb60c106b06e49cd734b5b396d
-
SHA512
ef0988195d7e9fef4a66c00a40182f4e685c7caf8c08236adb93f32f4a2c8935c92d94b21e00faa09768d1e8bbd5077e60587795664cecf8c5cc94cc94c16ac4
-
SSDEEP
12288:gZLolhNVyEpYxhb/tboA+yAYtX5Sw0zKtIHMWqHI:gZqhOE2xVlZAYtIKtOMI
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-21_8479a43cef11e55daefeceb8a4e365b0_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-21_8479a43cef11e55daefeceb8a4e365b0_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\A7B4.tmp"C:\Users\Admin\AppData\Local\Temp\A7B4.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-04-21_8479a43cef11e55daefeceb8a4e365b0_mafia.exe 47424E830AD26E93CFB06F225F3B01EEBF9F30516678F8EC98724EAC2C587EC07F5CA2AF89FBB2CB13A10C89DCC9E81E19614315F1C40FCE714AFF2419C3C8332⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
411KB
MD502dcd03a677932b5761a23a6880da1d3
SHA122322fe8a9fb8f6eb2e63bdfc2d8ddae8080915a
SHA2560808ea4b35be461fbbab12daebf967119381a4783df0d220f3e91365852f3427
SHA5125a221e584ec06cc9c370e11b116d81925e1968c8c702fa95b1dbd3b6bdb7ed8baa7441a1ef7c3f3f8ef3391c10e32213057a9e474520c46ee35775506cf48632