Analysis
-
max time kernel
143s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
28-11-2024 10:42
Behavioral task
behavioral1
Sample
2024-11-28_299fc5aba814f48bc4d35a58187417e1_mafia.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-11-28_299fc5aba814f48bc4d35a58187417e1_mafia.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-11-28_299fc5aba814f48bc4d35a58187417e1_mafia.exe
-
Size
433KB
-
MD5
299fc5aba814f48bc4d35a58187417e1
-
SHA1
a7d7c1779f645ff9e2f4e641df9683124e15dd3f
-
SHA256
f3219bc1e35ff2a6e131842ffbd38ca17f2cb24056538f36021ed4a5bbe93b02
-
SHA512
0d34c26a7213522a8208a7079c8e5d105c226dfc6e37b30090d0967f85af15de259f80e65a877bb396ebd7bd1e9e4c192c836e7b380c18ae0c79ae75df190c0b
-
SSDEEP
6144:DuQRHexSH+hDGcPwg7hp58mobfdd82u1fjDmqz+/9o6EB7hG9pI0Z:DuQRHexSH+hmgB6dOx1LDmqzeEBsbZ
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
2024-11-28_299fc5aba814f48bc4d35a58187417e1_mafia.exedescription ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-11-28_299fc5aba814f48bc4d35a58187417e1_mafia.exe