23a3c67cfa871df2bf7cdee2695b8d93305bc88eb37a40348d05a4e31752338f

Analysis

max time kernel
139s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
16/08/2023, 18:49

Target

0f0b6efcd3a16c3b3c8eb3db527e105d_mafia_JC.exe
Size

412KB
MD5

0f0b6efcd3a16c3b3c8eb3db527e105d
SHA1

24e8364e0215bbf2734cdf72f810b3fde7b67f18
SHA256

23a3c67cfa871df2bf7cdee2695b8d93305bc88eb37a40348d05a4e31752338f
SHA512

490ecbc59dc2f243125ff731f2c7ef497e7b86f2b94bf6b33e1f49a77b1db8d265c6b39daff679d15a0432c93dae7cc957f662ab301299170a19fc5c0d6f751f
SSDEEP

12288:U6PCrIc9kph5a0RSyMxnaKEtyPf0mPmv:U6QIcOh5a0DbNtG

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
4768	E81E.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2896 wrote to memory of 4768	2896	0f0b6efcd3a16c3b3c8eb3db527e105d_mafia_JC.exe	82
PID 2896 wrote to memory of 4768	2896	0f0b6efcd3a16c3b3c8eb3db527e105d_mafia_JC.exe	82
PID 2896 wrote to memory of 4768	2896	0f0b6efcd3a16c3b3c8eb3db527e105d_mafia_JC.exe	82

C:\Users\Admin\AppData\Local\Temp\0f0b6efcd3a16c3b3c8eb3db527e105d_mafia_JC.exe
"C:\Users\Admin\AppData\Local\Temp\0f0b6efcd3a16c3b3c8eb3db527e105d_mafia_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2896
- C:\Users\Admin\AppData\Local\Temp\E81E.tmp
  "C:\Users\Admin\AppData\Local\Temp\E81E.tmp" --pingC:\Users\Admin\AppData\Local\Temp\0f0b6efcd3a16c3b3c8eb3db527e105d_mafia_JC.exe 0EA48EEE9424722DDAF816FEC9E4DBD7B31D77A4FB9304339DAE9CD418A9594473AD9D40757B6B2E8FC903E4E92F292BE843AA2BE36FB8D2B610CDB3760379DB
  2⤵
  - Executes dropped EXE
  PID:4768

C:\Users\Admin\AppData\Local\Temp\E81E.tmp

Filesize
412KB

MD5
e4d2ada2fd2516c680847bba8544340d

SHA1
48ce0f422b98cde02cd02dc0a796b33decba6fca

SHA256
4086eaf747d03517eda9fd624e6657d38d3e97f056549d0e63db38238775d0aa

SHA512
3cac771c78a1ee520f4dc22b34cf0a53768af10006e2bdb212c56e9d7361c3b718fbd8da3610fec8fb8e278619d7cf918e74cb595cb1a0c16e3ba65cc69ed34c

Download Submit
C:\Users\Admin\AppData\Local\Temp\E81E.tmp

Filesize
412KB

MD5
e4d2ada2fd2516c680847bba8544340d

SHA1
48ce0f422b98cde02cd02dc0a796b33decba6fca

SHA256
4086eaf747d03517eda9fd624e6657d38d3e97f056549d0e63db38238775d0aa

SHA512
3cac771c78a1ee520f4dc22b34cf0a53768af10006e2bdb212c56e9d7361c3b718fbd8da3610fec8fb8e278619d7cf918e74cb595cb1a0c16e3ba65cc69ed34c

Download Submit