Analysis
-
max time kernel
149s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
25/07/2024, 09:44
General
-
Target
2024-07-25_101c85a5f980a25b6d1b3b4829aff618_mafia.exe
-
Size
3.1MB
-
MD5
101c85a5f980a25b6d1b3b4829aff618
-
SHA1
dfe30bfebbb3181ddaeb66aad8269e359846e5de
-
SHA256
7f2b02940275dde756cc539bd4388a77aab06ffe1620367eac1f934b5e7105ed
-
SHA512
8b1de41fbbf2dbb4456343ae2df4700e675f8790fd2d1d7ca724a94b5baea765ebd6fd0766be811803206f4aac48b52f9930da2ccb6665383d1fc1bcb61b0989
-
SSDEEP
98304:ijSna0vacLbJZ5jgH61IWSWXO+Ft+peJnjlWOKv0A+zZdM0MF:ba0vvN3x9OLIiOK8A+zZd
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-07-25_101c85a5f980a25b6d1b3b4829aff618_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-07-25_101c85a5f980a25b6d1b3b4829aff618_mafia.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx