a678926bd0d5741760394f911b7d9073bc859d5caf0ede01c79b5ae7ff39beda

Analysis

max time kernel
117s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
23/01/2024, 16:35

Target

2024-01-23_d70aa4be1034537f6b2a7fe0414d9c63_mafia.exe
Size

476KB
MD5

d70aa4be1034537f6b2a7fe0414d9c63
SHA1

6aa1797675e59a6926aa2dc04bcd20fb85174183
SHA256

a678926bd0d5741760394f911b7d9073bc859d5caf0ede01c79b5ae7ff39beda
SHA512

323104c3bba0597283503f70bb07f8def994f9e34fd2d1442361c988185ad6049be816bca4030ed4b071de1270d71f2545fb02c19fd88961a5c0e4c8942f9c39
SSDEEP

12288:aO4rfItL8HRXPAO9PG+RhRpMk5NLAgqergk7K9wlsDpVFd:aO4rQtGRXY6Pr5Nnrgk+9wlsDpVFd

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4652	499C.tmp

Executes dropped EXE 1 IoCs

pid	Process
4652	499C.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1996 wrote to memory of 4652	1996	2024-01-23_d70aa4be1034537f6b2a7fe0414d9c63_mafia.exe	89
PID 1996 wrote to memory of 4652	1996	2024-01-23_d70aa4be1034537f6b2a7fe0414d9c63_mafia.exe	89
PID 1996 wrote to memory of 4652	1996	2024-01-23_d70aa4be1034537f6b2a7fe0414d9c63_mafia.exe	89

C:\Users\Admin\AppData\Local\Temp\2024-01-23_d70aa4be1034537f6b2a7fe0414d9c63_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-23_d70aa4be1034537f6b2a7fe0414d9c63_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1996
- C:\Users\Admin\AppData\Local\Temp\499C.tmp
  "C:\Users\Admin\AppData\Local\Temp\499C.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-23_d70aa4be1034537f6b2a7fe0414d9c63_mafia.exe 562FB06330C205514C404C9A0AFFBDF4384C698B60D19D44A8CE9D9E7E47D69550CFC5E318B41D6353412BA8C4186A024E32DEEE9494D013DEF7692046EA877D
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4652

C:\Users\Admin\AppData\Local\Temp\499C.tmp

Filesize
476KB

MD5
8d5ec2aa51f0ed75c2e0df217825e164

SHA1
bcfcb9a8aa520abe4f63c2f242bc53af323a37e8

SHA256
99207de2af6945b88566abfb07f32e9be1a74b41c48dd72da681806aecebd1d3

SHA512
627e6cb2d607b29a4ed8f47381c5b576b22c32eaf7d5043ba108eddab5efd413d20253efeae59138d217b82ce1b27f09b0a9f0316c91c375f8d9673bd31afd5e

Download Submit