Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
26/08/2024, 00:27
Static task
static1
Behavioral task
behavioral1
Sample
2024-08-26_2d2bfc0d7340fd88ecc59f02c577add1_mafia.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-08-26_2d2bfc0d7340fd88ecc59f02c577add1_mafia.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-26_2d2bfc0d7340fd88ecc59f02c577add1_mafia.exe
-
Size
9.9MB
-
MD5
2d2bfc0d7340fd88ecc59f02c577add1
-
SHA1
9fc0185f45fbc39ed102cc3c927e464f98872afc
-
SHA256
55ab90e8e67eb0902c8362b218283678c022698b0827560a47927f57dec0e0c1
-
SHA512
fb9544ed9d3abfd8aa33e500b642dcfde37332984c1d7267113abd72d7a7a4fed89f49fe27c439c03236b369504af3a155914e22680952e7baebaa0ad77bffef
-
SSDEEP
98304:wEVbmM2W+2TzjI4blRkEu9Hd8I5KQlnjI4blRkEu9Hd8I5KQlnjI4blRkEu9Hd8F:wEV6/GFu7jFu7jFu7jFu7jFu7jFu7
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-08-26_2d2bfc0d7340fd88ecc59f02c577add1_mafia.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2472 2024-08-26_2d2bfc0d7340fd88ecc59f02c577add1_mafia.exe 2472 2024-08-26_2d2bfc0d7340fd88ecc59f02c577add1_mafia.exe