624c4a39039daea0038e5ddb92c6cf2d95b334032369f212d81a70cbea5ace82

Analysis

max time kernel
157s
max time network
172s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11/10/2023, 10:57

Target

2023-08-26_99f3a43e9e1c2d7660156ffb8eb5e21c_mafia_JC.exe
Size

412KB
MD5

99f3a43e9e1c2d7660156ffb8eb5e21c
SHA1

2fe9d1e397bb305326b5cb4b9ec7504a9e7a8dd9
SHA256

624c4a39039daea0038e5ddb92c6cf2d95b334032369f212d81a70cbea5ace82
SHA512

6ce72ae9d0c878ededcff9f6ac38eb6846729608680113415904849e850dcf1e72ac282dca30b76a2c7faecbf9cd883e506474e9ece629e6cad631be368e988e
SSDEEP

6144:UooTAQjKG3wDGAeIc9kphIoDZngAQDRrltI8V3GBATlI6v4221dSzJa5P:U6PCrIc9kph5KA4JTq6jqS9G

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2296	4FC.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4444 wrote to memory of 2296	4444	2023-08-26_99f3a43e9e1c2d7660156ffb8eb5e21c_mafia_JC.exe	86
PID 4444 wrote to memory of 2296	4444	2023-08-26_99f3a43e9e1c2d7660156ffb8eb5e21c_mafia_JC.exe	86
PID 4444 wrote to memory of 2296	4444	2023-08-26_99f3a43e9e1c2d7660156ffb8eb5e21c_mafia_JC.exe	86

C:\Users\Admin\AppData\Local\Temp\2023-08-26_99f3a43e9e1c2d7660156ffb8eb5e21c_mafia_JC.exe
"C:\Users\Admin\AppData\Local\Temp\2023-08-26_99f3a43e9e1c2d7660156ffb8eb5e21c_mafia_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4444
- C:\Users\Admin\AppData\Local\Temp\4FC.tmp
  "C:\Users\Admin\AppData\Local\Temp\4FC.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2023-08-26_99f3a43e9e1c2d7660156ffb8eb5e21c_mafia_JC.exe 33280483EFF00C9638E203893289EEC224F1B5133D5E517954AB39350C7F8A0EC22134E4AF6717F375CA58621D52E458D1CE9246683DEFF73E7695AAB2712048
  2⤵
  - Executes dropped EXE
  PID:2296

C:\Users\Admin\AppData\Local\Temp\4FC.tmp

Filesize
412KB

MD5
48cdb0f4d83c83c5ea6eef86f3de9a7c

SHA1
fedbeebae85c7893fc135dc8d9a623bd963f6d7e

SHA256
a36ee3bb47ebcaeaf28b9dc2be4e8977136fe1094670d9568cef22a4da24c42b

SHA512
a682fdf3b3d574517b52dfe51b34861226d20fed9fef42fb1b3f556de8789d243c3cb505bee9981a904b116a2fe5d9a56b451d8a19e8d1c1862d341081bc43c5

Download Submit
C:\Users\Admin\AppData\Local\Temp\4FC.tmp

Filesize
412KB

MD5
48cdb0f4d83c83c5ea6eef86f3de9a7c

SHA1
fedbeebae85c7893fc135dc8d9a623bd963f6d7e

SHA256
a36ee3bb47ebcaeaf28b9dc2be4e8977136fe1094670d9568cef22a4da24c42b

SHA512
a682fdf3b3d574517b52dfe51b34861226d20fed9fef42fb1b3f556de8789d243c3cb505bee9981a904b116a2fe5d9a56b451d8a19e8d1c1862d341081bc43c5

Download Submit