00c3f0a22445c712eef9223752c560bad8161176a00f31ec7ac750a4570d2185

Analysis

max time kernel
118s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
12/01/2024, 05:56

Target
2024-01-11_22379af9e0f1937ed00b997566d2e76f_mafia.exe
Size 428KB
Sample240112-gm3wpahaa3
SHA256 00c3f0a22445c712eef9223752c560bad8161176a00f31ec7ac750a4570d2185
MD5 22379af9e0f1937ed00b997566d2e76f
SHA1 28323130fb2a696477b949117299bbf12812b8c1
SHA512 6aa11ce6466186ab171d40639e29672fb0a15803422d6fac868e8583bb557e05b73b946d2683f26fd3133c6ebf6f15d35a62b6be981a9853c1c28f745d4ce9fe
SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mF0FRXZ7kpdGSeKlGqoGV8MlnIPqHR:gZLolhNVyEFFRJYp4SeMGgSiIPqHR
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3500	48C1.tmp

Executes dropped EXE 1 IoCs

pid	Process
3500	48C1.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4748 wrote to memory of 3500	4748	2024-01-11_22379af9e0f1937ed00b997566d2e76f_mafia.exe	24
PID 4748 wrote to memory of 3500	4748	2024-01-11_22379af9e0f1937ed00b997566d2e76f_mafia.exe	24
PID 4748 wrote to memory of 3500	4748	2024-01-11_22379af9e0f1937ed00b997566d2e76f_mafia.exe	24

C:\Users\Admin\AppData\Local\Temp\2024-01-11_22379af9e0f1937ed00b997566d2e76f_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-11_22379af9e0f1937ed00b997566d2e76f_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4748
- C:\Users\Admin\AppData\Local\Temp\48C1.tmp
  "C:\Users\Admin\AppData\Local\Temp\48C1.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-01-11_22379af9e0f1937ed00b997566d2e76f_mafia.exe D37ED179FC3C0B595EDD7FB9A99D00BCDD70A580A1C7AD2955792D55C997080C39B2AA433512D63A343564A7E9B87629AFC979FB40A46D8B0DF3F58379808449
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3500

48C1.tmp

Path C:\Users\Admin\AppData\Local\Temp\48C1.tmp
Size 92KB
SHA256 67ae0444e184a8f9d694098a4a880ba8b50487d00844f53931187fd96b5056e8
MD5 2fb5d10d87b9a6d20b3a8bbe5734ddfb
SHA1 812be4dc018acda03a73a54d6bc4e7af4f4fa6dd
SHA512 1da0346458d927d93e9c220642593087fbcec9684680be70236ba74523481e5aaae49d48e271c023d13d32d3cc726f200da2cfe151ee255d61f75d332c04a430
SSDEEP 1536:QqGZM9P2Z0TwxPo9utguGxTAlNa14Trvc3HtYY5djF7OKwTDKqGues/Op1rvCoc/:T0V5TrvczErv7Gub/Op1KJN
MD5 SHA1 SHA512 SSDEEP

Submit Download