Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
20-10-2024 20:49
General
-
Target
2024-10-20_93809be4e500789f082a2ecd330bde8b_mafia.exe
-
Size
672KB
-
MD5
93809be4e500789f082a2ecd330bde8b
-
SHA1
75e0aae3a939f29e862220b088646d10414d7e12
-
SHA256
1f7f2749b7b5c96734f5d6186c9be94a3a3cbc4472eaa1630e4e26932d0c0ba0
-
SHA512
d05dd4090b2a10e77ba3a1cf1c41754d10e297764c4289f8e4e89fccbe1b1e1f2215aacef861a1b632a2fb25e915984f5f96714a0e80ee2f35ff9cdd6c5dff42
-
SSDEEP
12288:FTNjEc3PR8R0ZdAscJ9AMUxGi3oUw/cnuXMx2JOVawyu6GPr96/zSb9R3/R9maTg:hNjE2PRhgx3AHf3odEuXMx2JOVKuJPrs
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-10-20_93809be4e500789f082a2ecd330bde8b_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-10-20_93809be4e500789f082a2ecd330bde8b_mafia.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses