Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/06/2024, 15:39

General

  • Target

    2024-06-06_9bbfc23d9b90e0b21da42cd902705141_mafia.exe

  • Size

    1.9MB

  • MD5

    9bbfc23d9b90e0b21da42cd902705141

  • SHA1

    893ee99ebfddc0d88469312d130b64e2ed025762

  • SHA256

    3ef60945d9435c7d92ff2d10457701d2a57a38d0249bce220cab620e13d5173d

  • SHA512

    1153a51f48d3e0fdad7d902775a240ff0fcc2c9b9ccc5a926361ff4b5ee1253f75d6ba604edb5ceb08ea8a3d894df21096d307dc28c35710448f1c240e6b7f55

  • SSDEEP

    24576:6EV0W4q8SqJ7Es7QwY2vvUBpyyb6+dNz/B0snnypOnrnj+n:1V0WRQ7Es79Y2UBN6+dNLGsnn/en

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-06_9bbfc23d9b90e0b21da42cd902705141_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-06_9bbfc23d9b90e0b21da42cd902705141_mafia.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:2148

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2148-0-0x00000000000F0000-0x00000000000F1000-memory.dmp

          Filesize

          4KB

        • memory/2148-1-0x00000000000F0000-0x00000000000F1000-memory.dmp

          Filesize

          4KB