0eafd8456a706e92572281d6fde5f523fb8ad7a803b4b124fde862eed2e7edbe

Analysis

max time kernel
143s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
07/01/2024, 12:08

Target

2024-01-06_47889f85d4a4557fd86b9c88d68f77fc_mafia.exe
Size

412KB
MD5

47889f85d4a4557fd86b9c88d68f77fc
SHA1

0c01cf65e1badc55403e161fcebbf1d844f29557
SHA256

0eafd8456a706e92572281d6fde5f523fb8ad7a803b4b124fde862eed2e7edbe
SHA512

e45f7167265bd229785a61a2253465d1be9be02db420e68fd38a163a1a83f3fa0d15e5496e728af3d3208b45b92753da4166366cf3eb9e9468c706afa34467b7
SSDEEP

6144:UooTAQjKG3wDGAeIc9kphIoDZnPVolrcRExXO1en1FS5jni8z6+zMK7mqBm2r5xH:U6PCrIc9kph54odQlB+zMK7mym2r5Rj

Score

7^/10

Deletes itself 1 IoCs

pid	Process
1528	5592.tmp

Executes dropped EXE 1 IoCs

pid	Process
1528	5592.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3052 wrote to memory of 1528	3052	2024-01-06_47889f85d4a4557fd86b9c88d68f77fc_mafia.exe	21
PID 3052 wrote to memory of 1528	3052	2024-01-06_47889f85d4a4557fd86b9c88d68f77fc_mafia.exe	21
PID 3052 wrote to memory of 1528	3052	2024-01-06_47889f85d4a4557fd86b9c88d68f77fc_mafia.exe	21

C:\Users\Admin\AppData\Local\Temp\2024-01-06_47889f85d4a4557fd86b9c88d68f77fc_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-06_47889f85d4a4557fd86b9c88d68f77fc_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3052
- C:\Users\Admin\AppData\Local\Temp\5592.tmp
  "C:\Users\Admin\AppData\Local\Temp\5592.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-01-06_47889f85d4a4557fd86b9c88d68f77fc_mafia.exe 6AF4274B956B5E68EFCA3F0244AB72971EEEBB740DAA673FBDDBF8CDC7BDBCDD83DD167DF91388A7B96FF2F7A34E4A2CADDFFAC43B60C31CD1FED41A58E15046
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:1528

C:\Users\Admin\AppData\Local\Temp\5592.tmp

Filesize
412KB

MD5
200c4d1fc0d056d0c7c71267e2866e43

SHA1
74795fdf2689f8c696c1392059bf73cc5aefc5c1

SHA256
0ccccff344d1712c4b5aa34718f269054150f611e2351ec08d9ce658dc89268e

SHA512
a591be7fde582357ed0fd274c36a56f447aab6a58b1288b014d59a7b775ffff94535887a9b00ac3f3359dc3b139073c2b9e5295350c6d129d66bf742be165fba

Download Submit