8f06186c7399ac753223f82945e273c01c2a341b905f19eb1f3c7e70475588be

Analysis

max time kernel
128s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
25-08-2023 16:27

Target

9e761c19eee4a4886f52630987740564_mafia_JC.exe
Size

384KB
MD5

9e761c19eee4a4886f52630987740564
SHA1

77b8b7cd6fb91f7e3e2194d39ca635f24bc9a409
SHA256

8f06186c7399ac753223f82945e273c01c2a341b905f19eb1f3c7e70475588be
SHA512

463e9d50c52b1ad000baaf23edb15cf4903c4cefd92a394677a9db43ba69e801538859868321db501f49a54343682fda88be202b18b908f2e55d38b7851b3278
SSDEEP

6144:drxfv4co9ZL3GBGgjODxbf7hHvJPdVCCgdAZ5ncxYsZ:Zm48gODxbzr6SnRsZ

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
4464	9DC6.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4500 wrote to memory of 4464	4500	9e761c19eee4a4886f52630987740564_mafia_JC.exe	80
PID 4500 wrote to memory of 4464	4500	9e761c19eee4a4886f52630987740564_mafia_JC.exe	80
PID 4500 wrote to memory of 4464	4500	9e761c19eee4a4886f52630987740564_mafia_JC.exe	80

C:\Users\Admin\AppData\Local\Temp\9e761c19eee4a4886f52630987740564_mafia_JC.exe
"C:\Users\Admin\AppData\Local\Temp\9e761c19eee4a4886f52630987740564_mafia_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4500
- C:\Users\Admin\AppData\Local\Temp\9DC6.tmp
  "C:\Users\Admin\AppData\Local\Temp\9DC6.tmp" --pingC:\Users\Admin\AppData\Local\Temp\9e761c19eee4a4886f52630987740564_mafia_JC.exe 14B604790112ADA7754F0A91025703882C19A674178306C5B5F239F80C44B39966CD069CEFB59C39D16BAA7B63F8E249927363500564E9A68BFCDB1D8EA1A7D4
  2⤵
  - Executes dropped EXE
  PID:4464

C:\Users\Admin\AppData\Local\Temp\9DC6.tmp

Filesize
384KB

MD5
bbbf10be41df26533e5caba6024bab9d

SHA1
7b15d08529e698cc9d53f8de04ae36a8d53dc0f7

SHA256
bc97dd8289b434221d179b11ee5e80168f81e497d770d22d6fec9f9ff7462073

SHA512
00f33de0527f37f9565fd2a536730fa615d2233b19bcc920d41d3f6c66c6cc04149602fa712c19da0363d3efe9b45c6f4fc72a56e0d467972a4097535f0b0ecb

Download Submit
C:\Users\Admin\AppData\Local\Temp\9DC6.tmp

Filesize
384KB

MD5
bbbf10be41df26533e5caba6024bab9d

SHA1
7b15d08529e698cc9d53f8de04ae36a8d53dc0f7

SHA256
bc97dd8289b434221d179b11ee5e80168f81e497d770d22d6fec9f9ff7462073

SHA512
00f33de0527f37f9565fd2a536730fa615d2233b19bcc920d41d3f6c66c6cc04149602fa712c19da0363d3efe9b45c6f4fc72a56e0d467972a4097535f0b0ecb

Download Submit