0cc48759784f50a89d160da92702fade8c534a104722139cc89957eac3e90150

Analysis

max time kernel
146s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
18-01-2024 13:42

Target

2024-01-18_c263e7bac6e9bb255e50f27bba13679d_mafia.exe
Size

412KB
MD5

c263e7bac6e9bb255e50f27bba13679d
SHA1

29ed17759703a793fe431f211ee709bc7b9425f1
SHA256

0cc48759784f50a89d160da92702fade8c534a104722139cc89957eac3e90150
SHA512

f725e8fe0aa94d5751f28ccb2b2fd30aebd99be5a64481fd342982dfecc5de9eb1d3b2454e3c74c69ac2fae54794a0326a9bf70789757ac90d12e879a3d32f53
SSDEEP

6144:UooTAQjKG3wDGAeIc9kphIoDZni7qB98dEkYKuSwoIL/ckhF+wUgBoP:U6PCrIc9kph5A2B9UGrx3VLBw

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2244	3E22.tmp

Executes dropped EXE 1 IoCs

pid	Process
2244	3E22.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4912 wrote to memory of 2244	4912	2024-01-18_c263e7bac6e9bb255e50f27bba13679d_mafia.exe	64
PID 4912 wrote to memory of 2244	4912	2024-01-18_c263e7bac6e9bb255e50f27bba13679d_mafia.exe	64
PID 4912 wrote to memory of 2244	4912	2024-01-18_c263e7bac6e9bb255e50f27bba13679d_mafia.exe	64

C:\Users\Admin\AppData\Local\Temp\2024-01-18_c263e7bac6e9bb255e50f27bba13679d_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-18_c263e7bac6e9bb255e50f27bba13679d_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4912
- C:\Users\Admin\AppData\Local\Temp\3E22.tmp
  "C:\Users\Admin\AppData\Local\Temp\3E22.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-01-18_c263e7bac6e9bb255e50f27bba13679d_mafia.exe 9D640271B1F2DB33FE31F8F5ADC5572C7B9BBA57BD59F156BA82674AD9EE00A78A24D29619FCAD32A35BE1D690BAA78562BC2704221AC0FB01487399DE054A6E
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2244

C:\Users\Admin\AppData\Local\Temp\3E22.tmp

Filesize
412KB

MD5
0facae2fd549b3f2df487be300d09a67

SHA1
f73fccdf86448cb4cf7ab642417b147c4ebc6883

SHA256
a1ce41c72f7874e41ad469a4cdedd91620510f3dd9a2c4a14a5c86ec3b464389

SHA512
95c25c81c4ebd35bc17009a5e812c324bde887611a2d922af59a8040870b91399e8f1020ce0a59abfeea4b4009487d53f606f212f1265fb2eb0835e6010ff1cd

Download Submit