158120726effc8dc9d261a5c133cdb30d63720086b5e3a0b6fbedbcd3b7d1751

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
10/01/2024, 05:56

Target

2024-01-09_7d8bd514bcced14932ff76c7e218867b_mafia.exe
Size

411KB
MD5

7d8bd514bcced14932ff76c7e218867b
SHA1

92657db571593c834e952b0e8b432da60e2ea0c1
SHA256

158120726effc8dc9d261a5c133cdb30d63720086b5e3a0b6fbedbcd3b7d1751
SHA512

2b1684da603658a9f3bcabb536212285e7e175895ce6601d140774fad3cabea4cf1c380043358eb2a114d4df0e6348bb656e387976c909ffac9e53baa636f718
SSDEEP

6144:gVdvczEb7GUOpYWhNVynE/mFmVKa/TdhC/GdCnyZM+z4fyu1qqH:gZLolhNVyE1wQT7gndpyEqqH

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4504	4815.tmp

Executes dropped EXE 1 IoCs

pid	Process
4504	4815.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3324 wrote to memory of 4504	3324	2024-01-09_7d8bd514bcced14932ff76c7e218867b_mafia.exe	32
PID 3324 wrote to memory of 4504	3324	2024-01-09_7d8bd514bcced14932ff76c7e218867b_mafia.exe	32
PID 3324 wrote to memory of 4504	3324	2024-01-09_7d8bd514bcced14932ff76c7e218867b_mafia.exe	32

C:\Users\Admin\AppData\Local\Temp\2024-01-09_7d8bd514bcced14932ff76c7e218867b_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-09_7d8bd514bcced14932ff76c7e218867b_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3324
- C:\Users\Admin\AppData\Local\Temp\4815.tmp
  "C:\Users\Admin\AppData\Local\Temp\4815.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-01-09_7d8bd514bcced14932ff76c7e218867b_mafia.exe 67BB460F70E1B5FC275BACF3014C34AD88CFA2ABD1D221253D23FDC3F11959C0DF328EC99DFE47475182C70EBC13416D260E4CC1BB852AFE8F2A1AF0FDD886D3
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4504

C:\Users\Admin\AppData\Local\Temp\4815.tmp

Filesize
411KB

MD5
f7b940102eab1739f64867bc33e6ca2a

SHA1
6c92305775f39a6a43718733f75983979d13c1e4

SHA256
8d51527174865295ffbd1c27f90b326ef8fb5235366c79b1955d0c8e690505dd

SHA512
b78749461e3ec694d2de272439669b4ba14b6bea3654cd652154eaf58a9ab45ea5f06a121b84f6242975602c19762879cd04d9f15e943531b0100e77c3a2de6c

Download Submit