6257f389f46caeed18496b01661d8d60313b2dc674574414f912d7b1acdc1254

Analysis

max time kernel
148s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
07-01-2024 12:16

Target

2024-01-06_cd999c2baf21b49b1d7ca39bd11b0be5_mafia.exe
Size

414KB
MD5

cd999c2baf21b49b1d7ca39bd11b0be5
SHA1

4fc1617207b61a05ab2e98118410b46695e2e3e6
SHA256

6257f389f46caeed18496b01661d8d60313b2dc674574414f912d7b1acdc1254
SHA512

54b99e1b30c1019bed60bec21df9b478191d0f85e88c250c947d48f8e3d9216c5d0babfc9b44b9096a6bf6f08f0412c6b31293c628aa0195d5df8940f0c0eb1b
SSDEEP

12288:Wq4w/ekieZgU65RKTP3EMsYyejO0zucQIptblx:Wq4w/ekieH6+81ejjBr

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3016	4AC4.tmp

Executes dropped EXE 1 IoCs

pid	Process
3016	4AC4.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2112 wrote to memory of 3016	2112	2024-01-06_cd999c2baf21b49b1d7ca39bd11b0be5_mafia.exe	89
PID 2112 wrote to memory of 3016	2112	2024-01-06_cd999c2baf21b49b1d7ca39bd11b0be5_mafia.exe	89
PID 2112 wrote to memory of 3016	2112	2024-01-06_cd999c2baf21b49b1d7ca39bd11b0be5_mafia.exe	89

C:\Users\Admin\AppData\Local\Temp\2024-01-06_cd999c2baf21b49b1d7ca39bd11b0be5_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-06_cd999c2baf21b49b1d7ca39bd11b0be5_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2112
- C:\Users\Admin\AppData\Local\Temp\4AC4.tmp
  "C:\Users\Admin\AppData\Local\Temp\4AC4.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-06_cd999c2baf21b49b1d7ca39bd11b0be5_mafia.exe 39D500B2CAF5897F59CFCD0F8079B69624AC84DEA09E02B6AFFAA14AA8FCB43B6DE6CBFAFDB2DABD9CF27AF19730CD3DD40B344172278D1EE75B5AF47813181B
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3016

C:\Users\Admin\AppData\Local\Temp\4AC4.tmp

Filesize
414KB

MD5
e41e4fbafce61e66469683d448c7b826

SHA1
8b15019c5c73bf5c9f8291d60b8b7c2bef121b33

SHA256
a9894fceab7ca98035ccffd4e4d026e9237315d2345b3e8298490ab73947b381

SHA512
7462fdcaf4c0b9bdd350f2b67fd5228892ab9ae125bb27506e5b41191703384d6540cc840e5f5857270748a5e52c8fca965aa1a7e992a7ac743b9a9f8d01911e

Download Submit