Analysis
- max time kernel
129s - max time network
98s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
03/06/2024, 09:23
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-03_0007af402190ff25b4967bb3419c271c_mafia.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-03_0007af402190ff25b4967bb3419c271c_mafia.exe
Resource
win10v2004-20240508-en
2 signatures
150 seconds
General
- Target 2024-06-03_0007af402190ff25b4967bb3419c271c_mafia.exe
- Size 1.8MB
- Sample240603-lcgb6aaa4s
- SHA256 3422e256f83f8ca2f0d0c724dc904b2580116512774632e33601438f35817f76
- MD5 0007af402190ff25b4967bb3419c271c
- SHA1 389785d187a383e1d9f3f61070d91cfe7f24d6a7
- SHA512 8dd985dc43fc9ba1fec5dab847205010fa16f87e0d7c2bfd781d10ee4831ebe1ad3bf8c909aff9d4d50e276a3f9258f9bb3bcf38886e205be0f5636e6f831efa
- SSDEEP 49152:1V0WRQ7Es79Y2UBN6+dNnKu0xzpl5qCleztrs:dwEs722Y6+dNnKu0xlqS
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4728 2024-06-03_0007af402190ff25b4967bb3419c271c_mafia.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4728 2024-06-03_0007af402190ff25b4967bb3419c271c_mafia.exe