Analysis
-
max time kernel
135s -
max time network
104s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
24/05/2024, 17:46
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2024-05-24_346127de65d2e29686e3f8e424c19375_mafia.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-05-24_346127de65d2e29686e3f8e424c19375_mafia.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
-
Target
2024-05-24_346127de65d2e29686e3f8e424c19375_mafia.exe
-
Size
2.1MB
-
MD5
346127de65d2e29686e3f8e424c19375
-
SHA1
bda386164bac3c3eb3842ec7e1853ffa00103f15
-
SHA256
ee46f6f8e7e49ebcf58e4ad0d86b205bf0e47d53506369216f75ee7af8a5f17a
-
SHA512
d894c17e4d82dc634dcc106605dd33e08b76153d105eaf78f843ea7b0dfe27126d20b2b7fe1dfa94eb3450d165707d6e2cf8b12c9aede4b3f80f928afdf244d2
-
SSDEEP
49152:q9yiCJ5rFwnANZGEXeZ+9Gx8egOSDAmosh3ANkTTl:BJ5rFwnApe5gOS9V3AM
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2364 4628 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-24_346127de65d2e29686e3f8e424c19375_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-24_346127de65d2e29686e3f8e424c19375_mafia.exe"1⤵PID:4628
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4628 -s 3802⤵
- Program crash
PID:2364
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4628 -ip 46281⤵PID:3672