b83640dbac31f485cfd150917fff806786dc691aa43cb7270a531a999615e1d6

Analysis

max time kernel
138s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20230824-en
resource tags

arch:x64arch:x86image:win10v2004-20230824-enlocale:en-usos:windows10-2004-x64system
submitted
24/08/2023, 16:37

Target

842d2f82731b89f685eac56663ee98fb_mafia_JC.exe
Size

444KB
MD5

842d2f82731b89f685eac56663ee98fb
SHA1

7c996f158556cb5f9ab7ec89ab1c653f61a15b08
SHA256

b83640dbac31f485cfd150917fff806786dc691aa43cb7270a531a999615e1d6
SHA512

d6de6cea7e795d87bed55980e96bdca21dadcf8432241f9580ccacad62a71fecfcaead28dc8f63888c74b133150c7a7826984809a2d7fdd8d8f767d7ad452a59
SSDEEP

12288:Nb4bZudi79L1uHpR7GlUK66F/6rNim5A:Nb4bcdkL16G/68+NJ

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2560	EFDE.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2252 wrote to memory of 2560	2252	842d2f82731b89f685eac56663ee98fb_mafia_JC.exe	84
PID 2252 wrote to memory of 2560	2252	842d2f82731b89f685eac56663ee98fb_mafia_JC.exe	84
PID 2252 wrote to memory of 2560	2252	842d2f82731b89f685eac56663ee98fb_mafia_JC.exe	84

C:\Users\Admin\AppData\Local\Temp\842d2f82731b89f685eac56663ee98fb_mafia_JC.exe
"C:\Users\Admin\AppData\Local\Temp\842d2f82731b89f685eac56663ee98fb_mafia_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2252
- C:\Users\Admin\AppData\Local\Temp\EFDE.tmp
  "C:\Users\Admin\AppData\Local\Temp\EFDE.tmp" --helpC:\Users\Admin\AppData\Local\Temp\842d2f82731b89f685eac56663ee98fb_mafia_JC.exe AF5DAE719601853CD204DAAAB498D2CCB4CDFD79084F4D92F7C670B0B6B431199DAC21B2D2F8B7D653C25DB7CA47CB566B30D72EC1FB39690B1D7966EECE1A20
  2⤵
  - Executes dropped EXE
  PID:2560

C:\Users\Admin\AppData\Local\Temp\EFDE.tmp

Filesize
444KB

MD5
bd23a295122b51189b72c9351596ec5d

SHA1
17d20f0a4733beb244c5cd3ad433977111d5ceaf

SHA256
c62cf926b86ea2bcd8a9474bcb227869b6240bf3f11c435109c92fb24be03bd3

SHA512
a6041c67668b18f76cccff6ceebb906d801e8cbcab6c9f80269e969fab8d82bddf20124de4d111cb30d4a78cd28d4f028de471a09cb82e340ab13257e7f91daa

Download Submit
C:\Users\Admin\AppData\Local\Temp\EFDE.tmp

Filesize
444KB

MD5
bd23a295122b51189b72c9351596ec5d

SHA1
17d20f0a4733beb244c5cd3ad433977111d5ceaf

SHA256
c62cf926b86ea2bcd8a9474bcb227869b6240bf3f11c435109c92fb24be03bd3

SHA512
a6041c67668b18f76cccff6ceebb906d801e8cbcab6c9f80269e969fab8d82bddf20124de4d111cb30d4a78cd28d4f028de471a09cb82e340ab13257e7f91daa

Download Submit