Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
22-04-2024 21:43
General
-
Target
2024-04-22_bcf7efae79d932f8884733c48d48f742_mafia.exe
-
Size
441KB
-
MD5
bcf7efae79d932f8884733c48d48f742
-
SHA1
f88e0e6ae761ac3b1b189acdadc15cecc0d425ba
-
SHA256
efb6009c8d5c3de5b2f4d07934c810dec672974e3412d29013781b4e56e7eff2
-
SHA512
cfc0b05d1c6952bbc8afe6c0c4a6b98e128c729c861a94a00faa35253cd4d132f1a96449d60f881be2307d972646e91824026c8c2cc9686bab90d4dfd7be88a1
-
SSDEEP
6144:6ajdz4s4mDHq9OXpOd0p6Jiv+vtvnKsejchIHaLgkYX77f68w+RD0leik+xRc:6i4ET7+0pAiv+spjc2awL7SdOGe4Rc
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-22_bcf7efae79d932f8884733c48d48f742_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-22_bcf7efae79d932f8884733c48d48f742_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\1777.tmp"C:\Users\Admin\AppData\Local\Temp\1777.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-22_bcf7efae79d932f8884733c48d48f742_mafia.exe 67000B95A0C01213B9133FF1697384A2FA84E51B4C00106CF3657090D6EEC0DBD05F404AE67670F937C3B0D54D8C4CA139405C19241F597C016FDC13DB463BFA2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
441KB
MD5ac4c8f826d8f171fbc504ec12b41b802
SHA161bdf2efdfdba519b8e83e3995aa498f0b3bb4b0
SHA2568cca09d4eb7ab2f17c1b55871f0abaf7260b09a6295e3f623fa15cc883853d9b
SHA51290fa5f79f6619cc9b5d3ffe1bd45be596aba682c88935e24bf9724eeef621a384ca0a1c9740f55ae724f0b2b51d790f0afe7035094258f1ccc0b842c60142255
-
Filesize
476KB
-
Filesize
476KB
-
Filesize
476KB
-
Filesize
476KB