Overview

overview

7

Static

static

7

2024-09-06...ia.exe

windows7-x64

7

2024-09-06...ia.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-09-06_68924b2b32b3dc54c6a21d537548f62a_mafia

  • Size

    2.7MB

  • Sample

    240906-bc8fjaxhqc

  • MD5

    68924b2b32b3dc54c6a21d537548f62a

  • SHA1

    9d3b7604c948459f4a552b77b18bec71af93a32a

  • SHA256

    ba10adaeb3d2914bc54729eb1514932c8b2bfea980a7b0f20f82d54214bf07b5

  • SHA512

    84090f719cb6536e2d75ed9853fd2691d1dc0af975faf2cd509fd1e9000718407b53d99c1511d7a28b0d114e4a0c8375a575b44baf4eba360da4f2cbbbe4a1c7

  • SSDEEP

    49152:VKyf64+O/75QZuTtS0rQMYOQ+q8CEiSW5wpLXG1Zy:VgoTWsM0r1QnNSBG1k

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      2024-09-06_68924b2b32b3dc54c6a21d537548f62a_mafia

    • Size

      2.7MB

    • MD5

      68924b2b32b3dc54c6a21d537548f62a

    • SHA1

      9d3b7604c948459f4a552b77b18bec71af93a32a

    • SHA256

      ba10adaeb3d2914bc54729eb1514932c8b2bfea980a7b0f20f82d54214bf07b5

    • SHA512

      84090f719cb6536e2d75ed9853fd2691d1dc0af975faf2cd509fd1e9000718407b53d99c1511d7a28b0d114e4a0c8375a575b44baf4eba360da4f2cbbbe4a1c7

    • SSDEEP

      49152:VKyf64+O/75QZuTtS0rQMYOQ+q8CEiSW5wpLXG1Zy:VgoTWsM0r1QnNSBG1k

    Score
    7/10
    discoveryvmprotect

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks