f7c8afeb6d07f775ff7810d69ffed557a2702deb78b99f654e34ca408eccae55

Analysis

max time kernel
127s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
14/10/2023, 00:10

Target

2023-08-25_72f28d44aebc4d0ab917a75c3144b2ca_mafia_JC.exe
Size

444KB
MD5

72f28d44aebc4d0ab917a75c3144b2ca
SHA1

1b9add9100deaba9aa9e51e5c74266af2dbafa60
SHA256

f7c8afeb6d07f775ff7810d69ffed557a2702deb78b99f654e34ca408eccae55
SHA512

7dca77d532f3ff334fc8027f0b80608c52c67eae6dcff57c7ef9bf11d08734ac8ad50714ee3b0fc77b1056716751e241b4e3ae7839833b07df687e12b5c34a65
SSDEEP

6144:fFrJxvldL4c5ONK1xgWbd1s79+iStS48T2tdfxNT4AD911BUnzAnag4gi8ZaNHnd:Nb4bZudi79Lp48T2NTzZ7Wn2+NH3EA

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
3076	C5D0.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1592 wrote to memory of 3076	1592	2023-08-25_72f28d44aebc4d0ab917a75c3144b2ca_mafia_JC.exe	88
PID 1592 wrote to memory of 3076	1592	2023-08-25_72f28d44aebc4d0ab917a75c3144b2ca_mafia_JC.exe	88
PID 1592 wrote to memory of 3076	1592	2023-08-25_72f28d44aebc4d0ab917a75c3144b2ca_mafia_JC.exe	88

C:\Users\Admin\AppData\Local\Temp\2023-08-25_72f28d44aebc4d0ab917a75c3144b2ca_mafia_JC.exe
"C:\Users\Admin\AppData\Local\Temp\2023-08-25_72f28d44aebc4d0ab917a75c3144b2ca_mafia_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1592
- C:\Users\Admin\AppData\Local\Temp\C5D0.tmp
  "C:\Users\Admin\AppData\Local\Temp\C5D0.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2023-08-25_72f28d44aebc4d0ab917a75c3144b2ca_mafia_JC.exe D2ED0F06F24E1F1D1322A133E69C3E80B26A1AA9C4819B861FDD4FCAD3DB3F2A85C1C3B7DE8D0B9CC0B2E4755095140D1B63D085DF7A4C41BE3268F9D429CCD9
  2⤵
  - Executes dropped EXE
  PID:3076

C:\Users\Admin\AppData\Local\Temp\C5D0.tmp

Filesize
444KB

MD5
080ce50cb4fb4e90e0fecd65437aef3e

SHA1
5193ceb369412149cdf616bdab570b6d32b50b86

SHA256
e5b335bf35b064adacfe847e7be64b3b8980cbffa482adf3e8d079d21e4a6b1f

SHA512
aacdfead1e2ebb8290092ecdcab3c733fb1750f8e7bce451857c188cf07778f9fd7a9e31ba5c22fb5ea870cf0cdaf96f4140f90b086bcaa5285ed96d40f033c4

Download Submit
C:\Users\Admin\AppData\Local\Temp\C5D0.tmp

Filesize
444KB

MD5
080ce50cb4fb4e90e0fecd65437aef3e

SHA1
5193ceb369412149cdf616bdab570b6d32b50b86

SHA256
e5b335bf35b064adacfe847e7be64b3b8980cbffa482adf3e8d079d21e4a6b1f

SHA512
aacdfead1e2ebb8290092ecdcab3c733fb1750f8e7bce451857c188cf07778f9fd7a9e31ba5c22fb5ea870cf0cdaf96f4140f90b086bcaa5285ed96d40f033c4

Download Submit