34ba61994b5ac1f6b3cf33eac97dfe6d16ef8f7e6655c24ae00231e5b5b88740

Analysis

max time kernel
158s
max time network
170s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
09-01-2024 06:49

Target

2024-01-08_e954ba793a2a596548a4d6513aeb310d_mafia.exe
Size

444KB
MD5

e954ba793a2a596548a4d6513aeb310d
SHA1

c707ae10328dc16cc34040ce321fbe048eda686e
SHA256

34ba61994b5ac1f6b3cf33eac97dfe6d16ef8f7e6655c24ae00231e5b5b88740
SHA512

e93bea067ac4f3b3eeb75d1a6bc33961150343d75478ef1508d2efef6865ea61cc1016d61392b2fb94cd767ce3e1d227b6280990b44c2081e020ad886b0151f9
SSDEEP

12288:Nb4bZudi79LgXKg+aBLCy5h2IZYmF06ZATA:Nb4bcdkL5fa9ygYL

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2080	ED00.tmp

Executes dropped EXE 1 IoCs

pid	Process
2080	ED00.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 996 wrote to memory of 2080	996	2024-01-08_e954ba793a2a596548a4d6513aeb310d_mafia.exe	90
PID 996 wrote to memory of 2080	996	2024-01-08_e954ba793a2a596548a4d6513aeb310d_mafia.exe	90
PID 996 wrote to memory of 2080	996	2024-01-08_e954ba793a2a596548a4d6513aeb310d_mafia.exe	90

C:\Users\Admin\AppData\Local\Temp\2024-01-08_e954ba793a2a596548a4d6513aeb310d_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-08_e954ba793a2a596548a4d6513aeb310d_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:996
- C:\Users\Admin\AppData\Local\Temp\ED00.tmp
  "C:\Users\Admin\AppData\Local\Temp\ED00.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-08_e954ba793a2a596548a4d6513aeb310d_mafia.exe 2C952DD4EC5127017B288C60233E35BD17FE209F38C2C677649585C032D662053191BA9D293EE100BC9791FC478495D1CA05F1718B7427DF8FDE2BA198BF0145
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2080

C:\Users\Admin\AppData\Local\Temp\ED00.tmp

Filesize
444KB

MD5
1eecd6e0bfa2f2cfffb6df9917916fe5

SHA1
71957038eedebb146d79a0b4fb4d69372820ea7b

SHA256
e4d14f964e0083bb9b11b0b5896fc41f9d0b1de430d9cedf9cc938228631442a

SHA512
447792ae80a3ec98512442544343528fcbdc2bfea87fd65d944bfa68bbaef4138badf837accd0f8d63336843feb969e8a23d3156ab269a96bc2d91df0b06b55c

Download Submit