56b4edb0f990044c0923253b717722d6325f5ec7dd99a0c47c1906d52b8ac3af

Analysis

max time kernel
93s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
18/01/2024, 23:37

Target

2024-01-18_feaf2a6d1791e928a3e48429b30eff2a_mafia.exe
Size

433KB
MD5

feaf2a6d1791e928a3e48429b30eff2a
SHA1

46350b5c16d778402ae0499ff5f1e9006619a1bd
SHA256

56b4edb0f990044c0923253b717722d6325f5ec7dd99a0c47c1906d52b8ac3af
SHA512

782519921a425b99a0ed9238929be49fdf11a8fdcfb5ffcfbbb9fac407a985c876342579c90201017a8af33b3dcad9a3f5702a5c24e40be3c2c47e3a14370886
SSDEEP

12288:Ci4g+yU+0pAiv+iOnHcrmkfbOV9edtwI/9fOAP2n:Ci4gXn0pD+ikWbOV9edT/9fNW

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2656	4391.tmp

Executes dropped EXE 1 IoCs

pid	Process
2656	4391.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4992 wrote to memory of 2656	4992	2024-01-18_feaf2a6d1791e928a3e48429b30eff2a_mafia.exe	85
PID 4992 wrote to memory of 2656	4992	2024-01-18_feaf2a6d1791e928a3e48429b30eff2a_mafia.exe	85
PID 4992 wrote to memory of 2656	4992	2024-01-18_feaf2a6d1791e928a3e48429b30eff2a_mafia.exe	85

C:\Users\Admin\AppData\Local\Temp\2024-01-18_feaf2a6d1791e928a3e48429b30eff2a_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-18_feaf2a6d1791e928a3e48429b30eff2a_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4992
- C:\Users\Admin\AppData\Local\Temp\4391.tmp
  "C:\Users\Admin\AppData\Local\Temp\4391.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-18_feaf2a6d1791e928a3e48429b30eff2a_mafia.exe C73A64F212F5CFA3A73389764308D0185DE0092720A2871A989A691D8A76677828B9C9AB695AFD66C1DCF202F6F37C261F8046764261E1A4495F2F95C36C5A5D
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2656

C:\Users\Admin\AppData\Local\Temp\4391.tmp

Filesize
433KB

MD5
3294bd1a78d28e0fefdec44522907f93

SHA1
13110e28c219136c68acafc8536b9b14ec5a664a

SHA256
f0f330332fa10e34ebe2931854b34e72df3df62308cbf41eca6ad4b2d4c8dd3c

SHA512
aafa6ee0bda4053aeaf08f511d00b371b293645ca6a51f4081233cc1f07e4cd1b9338fe93ad7f24c2a43357d359f9cc93002628a9660d2b3ca4bde505af01fb5

Download Submit