Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
22-04-2024 07:45
General
-
Target
2024-04-22_5942edd8b748421ccba3b2c41e2ffe6e_mafia.exe
-
Size
479KB
-
MD5
5942edd8b748421ccba3b2c41e2ffe6e
-
SHA1
5d3238c110e903ccce33d3709564723e3253a876
-
SHA256
55558d50a47a51a5823f6a3718d92c9b3749fcc62f05c9d028d22ee421363877
-
SHA512
de1d125beae15fe96422a15dcb0688a370c3f763398a875cf804f3008cd040a022d20ca55bbc70cb94a6e3194eb38df1e8616f97d7854a359afb152f3819d505
-
SSDEEP
12288:bO4rfItL8HASDIeMI6QwcGWYxzE/yY0/xm75UO:bO4rQtGAC8QwGYxzE65mVUO
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-22_5942edd8b748421ccba3b2c41e2ffe6e_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-22_5942edd8b748421ccba3b2c41e2ffe6e_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\121A.tmp"C:\Users\Admin\AppData\Local\Temp\121A.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-22_5942edd8b748421ccba3b2c41e2ffe6e_mafia.exe 70608D61AA0D10C865DE270593D0A78B516F16D6AA116EBF99219494D043A88D3DBA17D42F9A6C229CF2F9EB45D3EC11AF70F39C05EA37F302B999EA8801F9442⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
479KB
MD560fe432bad68c20032dc773bc4cc4087
SHA14c271b36f5476bb82b83e361eea683e82ac0e88f
SHA2560eabfaf4dea2bc378efb4cd8716de8aba16e926d7fa8a547db2b34f3ee5873c3
SHA51254cff014952f61fb24023697196efa5bcc79456c18f66a2bb589f5023965e12108c0caf30c26dbd76eb000518d5cc1b2682dd9ec688248a7b9efb713cc908699