Overview

overview

3

Static

static

3

2024-06-27...ia.exe

windows7-x64

3

2024-06-27...ia.exe

windows10-2004-x64

3

Resubmissions

09/07/2024, 15:44

240709-s6ffaa1bmj 3

27/06/2024, 11:34

240627-npnccaygrd 10

Analysis

  • max time kernel
    27s
  • max time network
    14s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/07/2024, 15:44

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-06-27_8101dd4485aa2bac14e7e3aee97627fd_mafia.exe

  • Size

    130KB

  • MD5

    8101dd4485aa2bac14e7e3aee97627fd

  • SHA1

    c205d1c146d9120657640e2d03111babdbf898d2

  • SHA256

    0b5c7c53f53393b0d75969a745b2f0e2158edc3e87a3ca2bb506f850442bc9a4

  • SHA512

    90da78a7615340eb98d14c055c9dcfb88f7a339bc48cc9661f860b6d915fb7cd5fa557ed701436a8b0c7c797b84998ad405d2b758d11ed17dd49b2112a4072dc

  • SSDEEP

    3072:q4lh6fWA53GutQuxQbC/46Ux83lWHbu+JJlR:qNfhxt9v46t+uO/

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-27_8101dd4485aa2bac14e7e3aee97627fd_mafia.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-27_8101dd4485aa2bac14e7e3aee97627fd_mafia.exe"
    1⤵
      PID:3164
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3164 -s 1244
        2⤵
        • Program crash
        PID:1268
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3164 -ip 3164
      1⤵
        PID:4672
      • C:\Windows\System32\rundll32.exe
        C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
        1⤵
          PID:3628

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/3164-2-0x0000000000D80000-0x0000000000D81000-memory.dmp

                Filesize

                4KB

                Download