ba2889256ed48ba589e29ed27b467004c1467eea9a1f12e4c5bb598e8ddfd3fe

Analysis

max time kernel
162s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
11/01/2024, 05:47

Target

2024-01-10_2669561cd1faada857cb7f087e40abb6_mafia.exe
Size

486KB
MD5

2669561cd1faada857cb7f087e40abb6
SHA1

44a106804224ae213f570989dbf53066a917d3ec
SHA256

ba2889256ed48ba589e29ed27b467004c1467eea9a1f12e4c5bb598e8ddfd3fe
SHA512

86e7ed6ae1fa0a0f8a026cbca298429169483f0b02be08a3ff55c93defd9d3d5ec9f8ab44ca3f5934654853a2d44c3b6d0f7e7cdc98680d8a07919d596827fa8
SSDEEP

12288:3O4rfItL8HPaz/ueaLqfiSObGI2tXwt7rKxUYXhW:3O4rQtGP7eaL3RGI2Gt3KxUYXhW

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2556	3F94.tmp

Executes dropped EXE 1 IoCs

pid	Process
2556	3F94.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5072 wrote to memory of 2556	5072	2024-01-10_2669561cd1faada857cb7f087e40abb6_mafia.exe	92
PID 5072 wrote to memory of 2556	5072	2024-01-10_2669561cd1faada857cb7f087e40abb6_mafia.exe	92
PID 5072 wrote to memory of 2556	5072	2024-01-10_2669561cd1faada857cb7f087e40abb6_mafia.exe	92

C:\Users\Admin\AppData\Local\Temp\2024-01-10_2669561cd1faada857cb7f087e40abb6_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-10_2669561cd1faada857cb7f087e40abb6_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5072
- C:\Users\Admin\AppData\Local\Temp\3F94.tmp
  "C:\Users\Admin\AppData\Local\Temp\3F94.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-10_2669561cd1faada857cb7f087e40abb6_mafia.exe 64114E49454DED2A00B16ACDEEBC81927606C8D59409B7C08B1275910543F155475A987A67DA76232059143014EAB0E1F70932909828BC760D3A5BBC62A09DA3
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2556

C:\Users\Admin\AppData\Local\Temp\3F94.tmp

Filesize
486KB

MD5
c033e5dbbdb8bc23ba12203abd17aa4a

SHA1
00461442ab2d1648eec264fae7b7d40c758e778f

SHA256
7381773a24a69a7e912f2eb150d76e323e9a421c5d00b4ae886185f96ad08f6d

SHA512
3cbfecd29c05799e8e75db75bfd56f4f47a9773603b7258525388cc063492d9a9ad4b0511cad175dcf1cc3f2fdb96b963a0b433961b897ad34aa3ecdb39b0bba

Download Submit