18563b12367aba8b0c196f3dfd957ce5e35806ec811c63bdc4b011fe7a8d72b0

Analysis

max time kernel
180s
max time network
193s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
07-01-2024 12:13

Target

2024-01-06_9465b851776e827c918462635e935a87_mafia.exe
Size

411KB
MD5

9465b851776e827c918462635e935a87
SHA1

5b1a89e26945f84f8b2a5384bf4a1f34a7ed7b67
SHA256

18563b12367aba8b0c196f3dfd957ce5e35806ec811c63bdc4b011fe7a8d72b0
SHA512

8bb5751f08af96e9284d88f4a07043b940c1216b0e1ec4a70b70c4950c11cffa5fd10eb925e16cce5b58df9ca0232583237a81c1778bdda75c0ee22077358f39
SSDEEP

6144:gVdvczEb7GUOpYWhNVynE/mFDhzzRwC4eo0ICa9JzCJAveBPqH:gZLolhNVyEKfRwC4mkztveqH

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4936	FE94.tmp

Executes dropped EXE 1 IoCs

pid	Process
4936	FE94.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1028 wrote to memory of 4936	1028	2024-01-06_9465b851776e827c918462635e935a87_mafia.exe	88
PID 1028 wrote to memory of 4936	1028	2024-01-06_9465b851776e827c918462635e935a87_mafia.exe	88
PID 1028 wrote to memory of 4936	1028	2024-01-06_9465b851776e827c918462635e935a87_mafia.exe	88

C:\Users\Admin\AppData\Local\Temp\2024-01-06_9465b851776e827c918462635e935a87_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-06_9465b851776e827c918462635e935a87_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1028
- C:\Users\Admin\AppData\Local\Temp\FE94.tmp
  "C:\Users\Admin\AppData\Local\Temp\FE94.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-01-06_9465b851776e827c918462635e935a87_mafia.exe 84BCFDFD6D6FB9183512E5E8D4C911D62692C7FD34163912B031BC1BFB1E0CB3023D6ABBD17BF502C6470C6C01DA23279A7E993BA22610611DDACF5BCD96A763
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4936

C:\Users\Admin\AppData\Local\Temp\FE94.tmp

Filesize
411KB

MD5
0a3fdc51b53d6db58dffc3b942de0649

SHA1
6aaa28ca73c7023a22b7ccd618d835445bb2ead4

SHA256
6b77edb90e7cab0bab8d3286d97f6d694d1fdb942ccf785e9e4bf0639f613ae7

SHA512
ba87aac3308bc95f27cca86b432f73ef93cb76306c027e793f088edf3b58b45d57c36ca4de9ddc2861b6d0a1f544e8b196ca404952b7977328c0c999fae6db69

Download Submit