Analysis

  • max time kernel
    132s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-05-2024 21:43

General

  • Target

    2024-05-24_ba43cc9e2091a8add937a648f25a0e7d_mafia.exe

  • Size

    339KB

  • MD5

    ba43cc9e2091a8add937a648f25a0e7d

  • SHA1

    e7afd97850dc401e51f0e406ffcaf1cfef987d78

  • SHA256

    7a20cfabcbd9837bf4d4cb75532c359f4f0b24eb41cf600d9d7c6366036379b1

  • SHA512

    77b8fdb45d79c0beb2ae65979b0bccdba4fef613e65a71c69e0c204f1512ff6d5504908a54ab423433ca302da36247bb3c10a6e17f9b1f9b5f301b6742847bf1

  • SSDEEP

    6144:ELBuyhqGYtATZ7aYN2IxhzsgWQx77HitfKW35t9iARoULv:Edu+qGYONaUN/sjADitfKWJjdRT

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-24_ba43cc9e2091a8add937a648f25a0e7d_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-24_ba43cc9e2091a8add937a648f25a0e7d_mafia.exe"
    1⤵
      PID:5100
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5100 -s 372
        2⤵
        • Program crash
        PID:4020
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 5100 -ip 5100
      1⤵
        PID:696

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads