Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
22-05-2024 02:00
General
-
Target
2024-05-22_9132c58d7da5d0e2a8557faf9468d829_mafia.exe
-
Size
163KB
-
MD5
9132c58d7da5d0e2a8557faf9468d829
-
SHA1
0d89ca0d75018e90493792d22d21adc7d8aa4472
-
SHA256
00188256ac5546e47c3de0a3abaf86c9672cc893b5ac560cd08c41524a473d34
-
SHA512
f1b0da2e3b52c9a33d9b69185442fd169fb1ed44687217b377a304819a34fb1a8158262bf5de4b5ce530a63c139b26daf1c32e28192a55334fbb5f86d2fba507
-
SSDEEP
3072:yhuD1dtsuAHVbvOzk9PFQpNtnhyi5GZFiy2M47x9/Mu:059ukt2pN7yi5+Ll47x97
Score
8/10
Malware Config
Signatures
-
Disables Task Manager via registry modification
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-22_9132c58d7da5d0e2a8557faf9468d829_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-22_9132c58d7da5d0e2a8557faf9468d829_mafia.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx