Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
25-05-2024 01:52
Behavioral task
behavioral1
Sample
2024-05-25_d5db47a092149738f5af88fb4e401a71_mafia.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-05-25_d5db47a092149738f5af88fb4e401a71_mafia.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
2024-05-25_d5db47a092149738f5af88fb4e401a71_mafia.exe
-
Size
341KB
-
MD5
d5db47a092149738f5af88fb4e401a71
-
SHA1
9cc66c6d24e8b506c71b23f2f6fd166316813511
-
SHA256
9b01b26c01aebf80ead262b90d4f1a5ab12841ca0d80fd2f55e8f5e94f7ab1f6
-
SHA512
63ec17148af5a6bba848a3d7485e019f0d69dc2ebf9d912cf354a75bf01ed66c17bdb9c28d471ca5a941acccc8e67eec65ed27d052dbedd6f9397d97a97ec1e0
-
SSDEEP
6144:hJqXUwx14gYnZOJILI1H4jv0edFKTbS4WWUqOWmIUTSoPZT:hJqX9x1ynZZIJzQcTbSVWUqO9uAZT
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4516 208 WerFault.exe 2024-05-25_d5db47a092149738f5af88fb4e401a71_mafia.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-25_d5db47a092149738f5af88fb4e401a71_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-25_d5db47a092149738f5af88fb4e401a71_mafia.exe"1⤵PID:208
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 208 -s 3722⤵
- Program crash
PID:4516
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 208 -ip 2081⤵PID:4028