66ccd0f16e66fb6fa109d091546fe1ed2396c061c778fb2d1f00423520e07a0a

Analysis

max time kernel
144s
max time network
116s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
05/01/2024, 05:42

Target

2024-01-01_4b329bbe869beabfb592f3a8c8dd3390_mafia.exe
Size

433KB
MD5

4b329bbe869beabfb592f3a8c8dd3390
SHA1

74fce144ad8d9691f1da9e5654184ea5d8013390
SHA256

66ccd0f16e66fb6fa109d091546fe1ed2396c061c778fb2d1f00423520e07a0a
SHA512

42fa0ed30ade0d41f437ae788f38f0f9879e5ee62a9f22b58d2c3e0cf12a7eba80651d579f225a5713871ff51b618f2123a7ac921731d5b7bec4603e985c1b7b
SSDEEP

6144:Cajdz4sTdDyyqiOXpOd0p6Jiv+vtvMGgj21/gMgUtDNW56/x9XlIpCy3GICDQNwp:Ci4g+yU+0pAiv++Ggj9Zg59X0/2NDXRn

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3976	4229.tmp

Executes dropped EXE 1 IoCs

pid	Process
3976	4229.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 644 wrote to memory of 3976	644	2024-01-01_4b329bbe869beabfb592f3a8c8dd3390_mafia.exe	19
PID 644 wrote to memory of 3976	644	2024-01-01_4b329bbe869beabfb592f3a8c8dd3390_mafia.exe	19
PID 644 wrote to memory of 3976	644	2024-01-01_4b329bbe869beabfb592f3a8c8dd3390_mafia.exe	19

C:\Users\Admin\AppData\Local\Temp\2024-01-01_4b329bbe869beabfb592f3a8c8dd3390_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-01_4b329bbe869beabfb592f3a8c8dd3390_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:644
- C:\Users\Admin\AppData\Local\Temp\4229.tmp
  "C:\Users\Admin\AppData\Local\Temp\4229.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-01_4b329bbe869beabfb592f3a8c8dd3390_mafia.exe BD4E5FAEBCB18240499AE6E471D7DB43FB9AC7BC8D53D96C07332E8A05411B3FF48F4215D7D4BC7E6DB5473DAF35ADBD94167A15871802F3FD0B897CCAE7D8CB
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3976

C:\Users\Admin\AppData\Local\Temp\4229.tmp

Filesize
9KB

MD5
15733db29792e38eb550d8729a329d31

SHA1
a12fc352f7186e95c82e565fdb56c5fd3abd9bab

SHA256
1de937318840e1489ccbeb812e7c0ada6a9c7a716f8e1224171965b11f7e2155

SHA512
ecb9c5cc35d72179498014295904f1c5e3f52189bc8f4b7b9185999f873d1f7f56ca5751ee97463cf35c8b93768f2df8bd3a63ea0b123dd39bff24dc9d712050

Download Submit