8e00998b64ed036bd5443fcc24437dc549e710fa1e5aac1619ea8c70a833a5bf

Analysis

max time kernel
142s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
23/01/2024, 18:36

Target

2024-01-23_93b5bd94daf6fa6a241fde3fcefa3225_mafia.exe
Size

479KB
MD5

93b5bd94daf6fa6a241fde3fcefa3225
SHA1

2a339a7ef021de5a6021213e9fdd34b30e367b89
SHA256

8e00998b64ed036bd5443fcc24437dc549e710fa1e5aac1619ea8c70a833a5bf
SHA512

7a048d1442656f269bea456b2712672cd8b59f946a6acbae4c4a5efaab8e09627abcbe2e68f8e290689c45c711a5dc437837de949db5def31810b62b291343b7
SSDEEP

6144:b9EyS4oMxIkjxcWqHtg88HARRQLDgCAurzQQW6eVGPpHQLSr6tG6Zr875UNY:bO4rfItL8HAoLDSurzQQW6qwY40w75UO

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4244	83D6.tmp

Executes dropped EXE 1 IoCs

pid	Process
4244	83D6.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4104 wrote to memory of 4244	4104	2024-01-23_93b5bd94daf6fa6a241fde3fcefa3225_mafia.exe	86
PID 4104 wrote to memory of 4244	4104	2024-01-23_93b5bd94daf6fa6a241fde3fcefa3225_mafia.exe	86
PID 4104 wrote to memory of 4244	4104	2024-01-23_93b5bd94daf6fa6a241fde3fcefa3225_mafia.exe	86

C:\Users\Admin\AppData\Local\Temp\2024-01-23_93b5bd94daf6fa6a241fde3fcefa3225_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-23_93b5bd94daf6fa6a241fde3fcefa3225_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4104
- C:\Users\Admin\AppData\Local\Temp\83D6.tmp
  "C:\Users\Admin\AppData\Local\Temp\83D6.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-23_93b5bd94daf6fa6a241fde3fcefa3225_mafia.exe C2094012E1720746A125DF6E28A0CDF69A412035FCBAF2A98D947D11090EE05D29223571F958C36C989072CEACCD34E8F9A8A2F81CD8C16487ABACD54DFD93DB
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4244

C:\Users\Admin\AppData\Local\Temp\83D6.tmp

Filesize
479KB

MD5
0959b75c41ee553d440295e0f141f1e5

SHA1
81544c78c3a41b305f3e612afa5da329dda7f8bb

SHA256
16e58d1608bde5faa3439b087034b0dca3591bfc1b37d62256591e43f09ba9f3

SHA512
766aec34a8397f4bd287d3fddaca7a4cd368914262cdd4d3e37a9b20791369497bb6b6203e2545617f6148e27503863d166567e3f2168d6b193ba575577c2b59

Download Submit