efc8ffd970a0d01658cfdacf4708e69da72f55743d1d07b0fcf31b15994d0b50

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
07/01/2024, 12:17

Target
2024-01-06_e3e1accd0bb97c8eafb18730a0a6beb3_mafia.exe
Size 411KB
Sample240107-pggehagag4
SHA256 efc8ffd970a0d01658cfdacf4708e69da72f55743d1d07b0fcf31b15994d0b50
MD5 e3e1accd0bb97c8eafb18730a0a6beb3
SHA1 3d90e2783e57c1ed0e66c01510867c6d6a519185
SHA512 d403f1efedbf1fd36bf28bcbe181d2fa1743a02e9240d30b54455616b149548950e5d32a60e463e70208d9da90769801f2b139759ff70540e8e09327a95d4111
SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFeky683W5aW61kWYso8qEOmu/3eNzmSZEFvlx5YqH:gZLolhNVyEMeG4WpWy8qEaf4qTvlIqH
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4824	421A.tmp

Executes dropped EXE 1 IoCs

pid	Process
4824	421A.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5104 wrote to memory of 4824	5104	2024-01-06_e3e1accd0bb97c8eafb18730a0a6beb3_mafia.exe	22
PID 5104 wrote to memory of 4824	5104	2024-01-06_e3e1accd0bb97c8eafb18730a0a6beb3_mafia.exe	22
PID 5104 wrote to memory of 4824	5104	2024-01-06_e3e1accd0bb97c8eafb18730a0a6beb3_mafia.exe	22

C:\Users\Admin\AppData\Local\Temp\2024-01-06_e3e1accd0bb97c8eafb18730a0a6beb3_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-06_e3e1accd0bb97c8eafb18730a0a6beb3_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5104
- C:\Users\Admin\AppData\Local\Temp\421A.tmp
  "C:\Users\Admin\AppData\Local\Temp\421A.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-01-06_e3e1accd0bb97c8eafb18730a0a6beb3_mafia.exe 18FF310BBF53AE51E8419E0D7410E27501129DBB5C9C6A1C4E8A39E4019315803AE6E5CA0D7459BCB3BB22C0E5B63AB95B824B65E4396B8B148E2766031ECD6E
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4824

421A.tmp

Path C:\Users\Admin\AppData\Local\Temp\421A.tmp
Size 411KB
SHA256 4d0321294239f567b741cabf9215f7c48fe5434db2064f30e7ab0395eadc0db7
MD5 75864f7b0767ea905a3120c967e81061
SHA1 cbc348f68dd44837712678d8b6658ec712d6f88b
SHA512 b06466ed488453280af7ae60109024bd99c86feeb05eb286b12cd72548b1160f82639b21e6a443f4ff3d2d6d6c7684a2c7579dd6d336593180a200fe73b14def
SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFrmT11Nd7eHs2foVDHY66Ra+iqH:gZLolhNVyEvT11NNeM2f6ARsqH
MD5 SHA1 SHA512 SSDEEP

Submit Download