Overview

overview

9

Static

static

3

2024-05-23...ia.exe

windows7-x64

9

2024-05-23...ia.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-23_4d9785d74894d5e3058a0164add366c6_mafia

  • Size

    2.3MB

  • Sample

    240523-w26cpabg79

  • MD5

    4d9785d74894d5e3058a0164add366c6

  • SHA1

    216e6c668b2c94d946e0f31fa4b50888fdd2aab5

  • SHA256

    f9025af4f74ca022d9f8babc10de3985626d0212eeca79558cd04a0a3ac1583e

  • SHA512

    9f624dd70cc0c3928a9580cec3b8f7afa16242fbd1dad2e402e564cfb375e070a9ae454f5d572f810614a44c35cf763b086b4f64ff1bc38a67b3d92d5c15343a

  • SSDEEP

    49152:jZRpZ8sSugiOHKq2SDNNgaciS0O3BZrLsPZQn90IYPqItmL:xZ8/u5q2SvgiK3BZ/sBQn90IpI

Score
9/10
macro

Malware Config

Targets

    • Target

      2024-05-23_4d9785d74894d5e3058a0164add366c6_mafia

    • Size

      2.3MB

    • MD5

      4d9785d74894d5e3058a0164add366c6

    • SHA1

      216e6c668b2c94d946e0f31fa4b50888fdd2aab5

    • SHA256

      f9025af4f74ca022d9f8babc10de3985626d0212eeca79558cd04a0a3ac1583e

    • SHA512

      9f624dd70cc0c3928a9580cec3b8f7afa16242fbd1dad2e402e564cfb375e070a9ae454f5d572f810614a44c35cf763b086b4f64ff1bc38a67b3d92d5c15343a

    • SSDEEP

      49152:jZRpZ8sSugiOHKq2SDNNgaciS0O3BZrLsPZQn90IYPqItmL:xZ8/u5q2SvgiK3BZ/sBQn90IpI

    Score
    9/10
    macro

    • Detects Windows executables referencing non-Windows User-Agents

    • Suspicious Office macro

      Office document equipped with macros.

      macro

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks