Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
04-05-2024 03:54
General
-
Target
2024-05-04_a19622bdbd9eadbbf851cdffa05d409d_mafia.exe
-
Size
20.7MB
-
MD5
a19622bdbd9eadbbf851cdffa05d409d
-
SHA1
a157364b6ece0071f7188161662d90d682296ade
-
SHA256
9e335e54d51a0434bf59acf751fb561360d8091001034edef46e3dce88df8f2f
-
SHA512
f4e31c553e8f2389795f69e4f46a8c1410c58c7108f2fc19503f9c576228dc4d6da60140f6922b2c2e93f3f0799d5b40381f602850760a99bc3b6bfad3c71dff
-
SSDEEP
196608:wlyPPcKFDlnZeuydQr0URziAYqODijd+LM0J3Hi372eeVwnSnWzm7a8nl01/hhkk:wcPkVJ3Hi3IcJ7
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-04_a19622bdbd9eadbbf851cdffa05d409d_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-04_a19622bdbd9eadbbf851cdffa05d409d_mafia.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx