Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
07-05-2024 00:52
General
-
Target
2024-05-07_7cef2552e93938de53a7e55faa66f311_mafia.exe
-
Size
428KB
-
MD5
7cef2552e93938de53a7e55faa66f311
-
SHA1
cfe809c297d0e60f073039e3a7e1a09f60d1c066
-
SHA256
71f3941e516d100854868112370dd1755221efbb80b69dfa47f3e734e1d0e649
-
SHA512
6fa3bcf8b665f6ce8aa1f10d69d6a82585b71d7f328800a696ef14593dd2325ff7998cd29eb6e9a13676f8b2dfb38e0a8690313f860793d079233181ed7d13a5
-
SSDEEP
6144:gVdvczEb7GUOpYWhNVynE/mFPrjnVaJFBfhkBmMyMovgqHR:gZLolhNVyEsPnVMhgqHR
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-07_7cef2552e93938de53a7e55faa66f311_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-07_7cef2552e93938de53a7e55faa66f311_mafia.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\8B8.tmp"C:\Users\Admin\AppData\Local\Temp\8B8.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-05-07_7cef2552e93938de53a7e55faa66f311_mafia.exe 3D1CE3DEBEDFC86D209F209C4DA69A4777D1478405BB4F59FE159008C681E91E249045734D782BFEDC91F16C07CB2684AD4B838BACB41018EAA6D88A07B521472⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
428KB
MD5ac68ee4e2f39201bfbc05e9919b23fc3
SHA1b33b3f5c887b1603a449b49473997e1e39c6f80a
SHA25696023b73c3a9c4f59958da55584841e00696ef2b16cb8b04df7af8da16823dbc
SHA512ec991db27ecb86f065480df2106f70d3b70a02aa349d3a329fc089f10ecba73999b53b1a4bdcc2c7d6bf0ea4f84b675eb30e96a0f23cf8c8cc92b4df0a401ebf