Overview

overview

7

Static

static

3

2024-05-15...ia.exe

windows7-x64

7

2024-05-15...ia.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    15-05-2024 15:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-05-15_528e59885bb95f63f577ce0507ca35a9_mafia.exe

  • Size

    413KB

  • MD5

    528e59885bb95f63f577ce0507ca35a9

  • SHA1

    8172f7188c28560f6c31a07ae099e1eaf172b692

  • SHA256

    0b559775c18b055366ae413b93272affc9743f74473fde359947f4a6317820f8

  • SHA512

    853b6991f047dd63a37b35866577cd0f490ac03ed1cb630ffbb483420b6bfcb479ee2878c8afadcfea0a750cd7a7763b4fb6e9a01be4e643325fb6d7ff9e5f37

  • SSDEEP

    6144:gVdvczEb7GUOpYWhNVynE/mFNoO2J+ptibtX8er/V7ahU8q+7CMWol54qHg:gZLolhNVyECtiRX8ebhL8FCMPl54qHg

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-15_528e59885bb95f63f577ce0507ca35a9_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-15_528e59885bb95f63f577ce0507ca35a9_mafia.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2948
    • C:\Users\Admin\AppData\Local\Temp\1BF9.tmp
      "C:\Users\Admin\AppData\Local\Temp\1BF9.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-05-15_528e59885bb95f63f577ce0507ca35a9_mafia.exe 763A33594FE686E29444F25DBF4D3EA501DC0A07448E065F91C825851E78180093443740E8272BAF02BAD6D71EBAD6893E02A3DB66575BFD1D5DE98F0A5F5C26
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:3024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\1BF9.tmp
    Filesize

    413KB

    MD5

    c47bd5625a08a173baa43be5ce79ce6a

    SHA1

    7d021f250874a8970035a0c7465c37ab68a04a3f

    SHA256

    418090989ce4d76ad96b1d91cd89490426ba65b8fd8b3ccc1c945fa06cd70356

    SHA512

    cabad6c8b69dfa7f9b031a9077006b53a489dcf61a034bfccb345038ce2e66870076d9ea34f1af172e9e694edcc4f3dfd62cde05c349e4006977d0d241b70f8c

    Download Submit