5cf35743db388959699efd496201e69df192eac888a019138270faff81d91010

Analysis

max time kernel
137s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
24/01/2024, 12:36

Target

2024-01-24_d9612fef598bf5db16a86f10f09e7576_mafia.exe
Size

486KB
MD5

d9612fef598bf5db16a86f10f09e7576
SHA1

17363dd1c48edb037e4556ed73638a0372e6dbbd
SHA256

5cf35743db388959699efd496201e69df192eac888a019138270faff81d91010
SHA512

0ce41dbe60889d7de9ee2bbf1bb4aee11e4ab50f7a39d64f9d8c8b7105704922b8bcf7ca4a4f6b5448d5d8fb60e1afbf7f4133c4eedaadb5d22860d28b3e5267
SSDEEP

12288:3O4rfItL8HPZ9PmH6p7OuG/nOS53n5ZSFfPh7rKxUYXhW:3O4rQtGPTmapCuG/nV3rSX3KxUYXhW

Score

7^/10

Deletes itself 1 IoCs

pid	Process
392	422.tmp

Executes dropped EXE 1 IoCs

pid	Process
392	422.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5024 wrote to memory of 392	5024	2024-01-24_d9612fef598bf5db16a86f10f09e7576_mafia.exe	89
PID 5024 wrote to memory of 392	5024	2024-01-24_d9612fef598bf5db16a86f10f09e7576_mafia.exe	89
PID 5024 wrote to memory of 392	5024	2024-01-24_d9612fef598bf5db16a86f10f09e7576_mafia.exe	89

C:\Users\Admin\AppData\Local\Temp\2024-01-24_d9612fef598bf5db16a86f10f09e7576_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-24_d9612fef598bf5db16a86f10f09e7576_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5024
- C:\Users\Admin\AppData\Local\Temp\422.tmp
  "C:\Users\Admin\AppData\Local\Temp\422.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-24_d9612fef598bf5db16a86f10f09e7576_mafia.exe 08F470ED0DF303C58D38C5C60C6476A58982731084C6CEDE675B362F1120E67692A2E26B8D9B8E1192801E606A06678DA4A1207EC5D4B215C9ECFBEC573CF6B2
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:392

C:\Users\Admin\AppData\Local\Temp\422.tmp

Filesize
486KB

MD5
451df3b5f4dbe9f8dd45e6a3dca0d619

SHA1
f5acd5a24d2f855da98ba70a56a9c685c48be9b3

SHA256
6b1174a1aac6304e901da105fd5211a7b9946dc024f7d0ee5c210730852ae53c

SHA512
8c5ee1e65a29ac17d1c59bf61d047e82fb1f79cb1b1be033a75d118ec07ebf3984636dea9a4a735e305204647937bfa180e8d80f6d7e5d0295c5b55d25508f82

Download Submit