03258385842f72f8a9f194b2451cedd07aeed4820fe656ee98cd1c834faf1fd3

Analysis

max time kernel
147s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
12/01/2024, 06:08

Target
2024-01-11_fd48b9f4f6652c06fb71cc64f00fe545_mafia.exe
Size 428KB
Sample240112-gwalhaaffm
SHA256 03258385842f72f8a9f194b2451cedd07aeed4820fe656ee98cd1c834faf1fd3
MD5 fd48b9f4f6652c06fb71cc64f00fe545
SHA1 35e074a0874dd01b287797a8a794110b84b9fa6d
SHA512 55213a24d4472631bad0da72ef62cb1a9fe00e508970171582632b257ca6137cd2ee8d73f5f1b1030ca1fbfad345f4c8dd35bbe887140fcf983b00ea94bc06ed
SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFoJxppUZQcIN12ePW1ueU2Kt7zgFqHR:gZLolhNVyEhppBN1olRKtgFqHR
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2840	43EE.tmp

Executes dropped EXE 1 IoCs

pid	Process
2840	43EE.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2008 wrote to memory of 2840	2008	2024-01-11_fd48b9f4f6652c06fb71cc64f00fe545_mafia.exe	22
PID 2008 wrote to memory of 2840	2008	2024-01-11_fd48b9f4f6652c06fb71cc64f00fe545_mafia.exe	22
PID 2008 wrote to memory of 2840	2008	2024-01-11_fd48b9f4f6652c06fb71cc64f00fe545_mafia.exe	22

C:\Users\Admin\AppData\Local\Temp\2024-01-11_fd48b9f4f6652c06fb71cc64f00fe545_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-11_fd48b9f4f6652c06fb71cc64f00fe545_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2008
- C:\Users\Admin\AppData\Local\Temp\43EE.tmp
  "C:\Users\Admin\AppData\Local\Temp\43EE.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-01-11_fd48b9f4f6652c06fb71cc64f00fe545_mafia.exe C3E2ADB50639DD1F64F6E9D86ADB25C624F4C8D84739690C48E083263D77A28F4495D87020F038791DA421005CEF1C7DAFFE5C29A3FC5D319FCFD8A4D51A7E14
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2840

43EE.tmp

Path C:\Users\Admin\AppData\Local\Temp\43EE.tmp
Size 92KB
SHA256 67ae0444e184a8f9d694098a4a880ba8b50487d00844f53931187fd96b5056e8
MD5 2fb5d10d87b9a6d20b3a8bbe5734ddfb
SHA1 812be4dc018acda03a73a54d6bc4e7af4f4fa6dd
SHA512 1da0346458d927d93e9c220642593087fbcec9684680be70236ba74523481e5aaae49d48e271c023d13d32d3cc726f200da2cfe151ee255d61f75d332c04a430
SSDEEP 1536:QqGZM9P2Z0TwxPo9utguGxTAlNa14Trvc3HtYY5djF7OKwTDKqGues/Op1rvCoc/:T0V5TrvczErv7Gub/Op1KJN
MD5 SHA1 SHA512 SSDEEP

Submit Download