Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/04/2024, 21:51

General

  • Target

    2024-04-27_69289439378d4ced2beac682c38705a9_mafia.exe

  • Size

    29.5MB

  • MD5

    69289439378d4ced2beac682c38705a9

  • SHA1

    a8ca100f6957c81cb854327c3acb0b279de8e012

  • SHA256

    d40070cac3c1eea88ed5c54c0dfd988d298b4ff081c0e24f2a137c60913f623d

  • SHA512

    0de83a9df032df765445499cee9ff94ae484d23845f98482788a6054ecf9712dde94755063e9109f53eec269781f9be70b60e50e97286ab176984a6f2922c7d3

  • SSDEEP

    786432:WSxrm1rlUX6ehMkRRBbFZ/1wM2abkGdSe:WSxU5NERBpZyNGdSe

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-27_69289439378d4ced2beac682c38705a9_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-27_69289439378d4ced2beac682c38705a9_mafia.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2412

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2412-0-0x0000000010000000-0x0000000010B93000-memory.dmp

          Filesize

          11.6MB

        • memory/2412-9-0x0000000000180000-0x0000000000184000-memory.dmp

          Filesize

          16KB

        • memory/2412-8-0x00000000003F0000-0x00000000003F4000-memory.dmp

          Filesize

          16KB

        • memory/2412-11-0x00000000003F0000-0x00000000003F4000-memory.dmp

          Filesize

          16KB

        • memory/2412-10-0x00000000005F0000-0x0000000000618000-memory.dmp

          Filesize

          160KB

        • memory/2412-20-0x0000000000CD0000-0x0000000000CD4000-memory.dmp

          Filesize

          16KB

        • memory/2412-19-0x0000000000B90000-0x0000000000B94000-memory.dmp

          Filesize

          16KB

        • memory/2412-18-0x0000000000B80000-0x0000000000B84000-memory.dmp

          Filesize

          16KB

        • memory/2412-17-0x0000000000710000-0x0000000000714000-memory.dmp

          Filesize

          16KB

        • memory/2412-16-0x0000000000700000-0x0000000000704000-memory.dmp

          Filesize

          16KB

        • memory/2412-15-0x00000000006D0000-0x00000000006D8000-memory.dmp

          Filesize

          32KB

        • memory/2412-14-0x0000000000680000-0x0000000000690000-memory.dmp

          Filesize

          64KB

        • memory/2412-13-0x0000000000180000-0x0000000000184000-memory.dmp

          Filesize

          16KB

        • memory/2412-12-0x0000000000620000-0x0000000000624000-memory.dmp

          Filesize

          16KB