Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16-06-2024 01:46

General

  • Target

    2024-06-16_9889ea5313df350590aa619a2bad7b87_mafia.exe

  • Size

    1.1MB

  • MD5

    9889ea5313df350590aa619a2bad7b87

  • SHA1

    f0a61a49f12d70e732aecff97c04e44f9b70cc77

  • SHA256

    6bbc996fe44764d60ed017d7e186d1c364cb6dc3bf106c42757a1a069f5eb501

  • SHA512

    342a44ef6e0eb28940f6a5394611642b8f5c62f346584a08b25051ee8aa0091696ce6eba357d674763f162de0cabd6a5482dc9740d6202c6271463e0c963174f

  • SSDEEP

    24576:uGKubOeBE0jjD55eeAtfYjD+gZC7bIm6gQJgk875:0xtfYjrC7bIm6gQJgk875

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-16_9889ea5313df350590aa619a2bad7b87_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-16_9889ea5313df350590aa619a2bad7b87_mafia.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:2180

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Public\Documents\Baidu\Common\I18N\conf.db

    Filesize

    367B

    MD5

    83374801dac4cab9a4e8ffb232334c44

    SHA1

    266b2dcead93d2e3f811438cbd8bfc16358e9d87

    SHA256

    727fb733ddf2c6c70785f90d3cec73d508330a11a58705df89330d7e64f51d68

    SHA512

    4967094fa2b889bd073c946266e96bd520012790990d75553a1b459469838cd98f9c4ab178c5c59040a28dca253e913d06b2efedc467d7a773191231e2306bb5

  • memory/2180-8-0x0000000000160000-0x0000000000161000-memory.dmp

    Filesize

    4KB