b9fd85f29936bd81f13dc98b612476eab292e4c759cd30f1719e558eec82b602

Analysis

max time kernel
145s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
11/01/2024, 05:48

Target

2024-01-10_3512192e50317945d1dc6fcdba81dc0c_mafia.exe
Size

468KB
MD5

3512192e50317945d1dc6fcdba81dc0c
SHA1

c8afe89a697ee058c9925909b61a92cb5ff4ead8
SHA256

b9fd85f29936bd81f13dc98b612476eab292e4c759cd30f1719e558eec82b602
SHA512

508f20a7d285302951417d936720bda557859d2b7e582ba554f7a4c20703306a392789c2949bed19400fdbe94bd9df713358dc9f4c08eb7a70ed411bdb20f780
SSDEEP

12288:qO4rfItL8HGtYO8oLd2NyZ4x0luB17bWmeEVGL:qO4rQtGGmO8EdiNkwumeEVGL

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3828	6B8B.tmp

Executes dropped EXE 1 IoCs

pid	Process
3828	6B8B.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1480 wrote to memory of 3828	1480	2024-01-10_3512192e50317945d1dc6fcdba81dc0c_mafia.exe	88
PID 1480 wrote to memory of 3828	1480	2024-01-10_3512192e50317945d1dc6fcdba81dc0c_mafia.exe	88
PID 1480 wrote to memory of 3828	1480	2024-01-10_3512192e50317945d1dc6fcdba81dc0c_mafia.exe	88

C:\Users\Admin\AppData\Local\Temp\2024-01-10_3512192e50317945d1dc6fcdba81dc0c_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-10_3512192e50317945d1dc6fcdba81dc0c_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1480
- C:\Users\Admin\AppData\Local\Temp\6B8B.tmp
  "C:\Users\Admin\AppData\Local\Temp\6B8B.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-10_3512192e50317945d1dc6fcdba81dc0c_mafia.exe 68D93750E1710095259129C9BEA6A509B3C8FCBC7E9EDB16E5EEB98EE5C5D86FE44898AFE453EA226CA0319E10C14510CDAF6DAA337CFF59B639E1A024139155
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3828

C:\Users\Admin\AppData\Local\Temp\6B8B.tmp

Filesize
468KB

MD5
84e1759eb2863cf631d76e3c4549e514

SHA1
c6cf236526e1279564cdb058727f0ddb9680594f

SHA256
93e670b833886d179fdd8b57c1efd1bb22cf59c29ef05a6e9acf664b73b6a945

SHA512
a50abe5b79a3aaff71bd3a82767f3dedb162a328a111a7672ec0235355852f71973846eb70ab8e100a9f435623ab2f8ac42d6394d300563283b39a88e3d7f360

Download Submit