Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
24/05/2024, 17:54
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2024-05-24_7a9c64240623bc30c25dd9dbefd3a469_mafia.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-05-24_7a9c64240623bc30c25dd9dbefd3a469_mafia.exe
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
-
Target
2024-05-24_7a9c64240623bc30c25dd9dbefd3a469_mafia.exe
-
Size
2.1MB
-
MD5
7a9c64240623bc30c25dd9dbefd3a469
-
SHA1
44efe5383114ce39f92c5429fd442f01c6de2a22
-
SHA256
56597bbc8a16705c889502a2494a09a626456a416fd824c6454c13ca129b2ea7
-
SHA512
72949a01a88b43547c48467164740ea67d848cbfc16a7581e4c766f2e08fced3053372da853d8febb2e3cd55c8b15b8d5827047e59cfca64291dfc3171bcb33e
-
SSDEEP
49152:Vu2c//xPEXq3x8qZ0Zujs5u5CnozH03Dsh3ANkTTl:i//xPEXqV0Vnozgw3AM
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4008 1532 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-24_7a9c64240623bc30c25dd9dbefd3a469_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-24_7a9c64240623bc30c25dd9dbefd3a469_mafia.exe"1⤵PID:1532
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1532 -s 3802⤵
- Program crash
PID:4008
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1532 -ip 15321⤵PID:2692