eb628bd22719f189a790ab40880ff9456160a55ad7b153dc001cd08101183a7b

Analysis

max time kernel
145s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
11/01/2024, 05:48

Target

2024-01-10_3255ca7b0ad14bb0002572535f1a4d90_mafia.exe
Size

468KB
MD5

3255ca7b0ad14bb0002572535f1a4d90
SHA1

953f113061da70599db402410049b639128ec4b9
SHA256

eb628bd22719f189a790ab40880ff9456160a55ad7b153dc001cd08101183a7b
SHA512

ef2ce9a6e897f63b75385a1cd9b91587480e5090277be6090c1f05fc05bd22815a16c1514fc710a787dfe9e90f576e720bec097b711a105d40aa7398835a9e52
SSDEEP

12288:qO4rfItL8HGZBxpsOLxJDnBdotSXFrPtOeo6Ch7bWmeEVGL:qO4rQtGGZBxpsQx3qMXFrVOejChumeEk

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4412	79F3.tmp

Executes dropped EXE 1 IoCs

pid	Process
4412	79F3.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2052 wrote to memory of 4412	2052	2024-01-10_3255ca7b0ad14bb0002572535f1a4d90_mafia.exe	93
PID 2052 wrote to memory of 4412	2052	2024-01-10_3255ca7b0ad14bb0002572535f1a4d90_mafia.exe	93
PID 2052 wrote to memory of 4412	2052	2024-01-10_3255ca7b0ad14bb0002572535f1a4d90_mafia.exe	93

C:\Users\Admin\AppData\Local\Temp\2024-01-10_3255ca7b0ad14bb0002572535f1a4d90_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-10_3255ca7b0ad14bb0002572535f1a4d90_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2052
- C:\Users\Admin\AppData\Local\Temp\79F3.tmp
  "C:\Users\Admin\AppData\Local\Temp\79F3.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-10_3255ca7b0ad14bb0002572535f1a4d90_mafia.exe EAD8C301FB5EA2D029C8343A05D3823F52C4926C11F929E0DD92D8ABB529F99411DEF27EA1F7E776141BA9AB096AA5DBE9B765D36D2E56A2B35E587617401CDA
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4412

C:\Users\Admin\AppData\Local\Temp\79F3.tmp

Filesize
468KB

MD5
73ef4bcb7b192c31330976a373e4c94a

SHA1
442f7c1497d824227e10f806c8e6845551cddfc4

SHA256
aed53cad4b90add90cac6837ac377543b5b57abdd44984c4ca1e00de80630d51

SHA512
78d8b0c01a5623d67679b9874d56736e93248ac3c1d5c315d0ef5f29eba0ad8392e23bd6e46002e67b104a3dc57659459ef3eda0ce749b60e4b791e2004a873a

Download Submit