5ded14e1eed590ef144393f33d90910f60154fbbcd42c901f0a6a457b2b8dcc8

Analysis

max time kernel
139s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
24/01/2024, 18:23

Target

2024-01-24_2155394fe46050fcbdcf414d221b8f20_mafia.exe
Size

384KB
MD5

2155394fe46050fcbdcf414d221b8f20
SHA1

69c658e202db92aea1ab86969fa7b87b5e6f2fe0
SHA256

5ded14e1eed590ef144393f33d90910f60154fbbcd42c901f0a6a457b2b8dcc8
SHA512

5a9c209085a49ae73438e6c83babbed1f9006c80c5ca5824092cf74740c0368044f7320a3b3cf79bfa6f4bf5a1ac464d3e0ea0637c219120a189158408ae010c
SSDEEP

6144:drxfv4co9ZL3GBGgjODxbf7hHAqDPOAnFd0I/+NicZiFQ5jGI7IqvSiwIZ:Zm48gODxbzTCAJrFQ5jFjvaIZ

Score

7^/10

Deletes itself 1 IoCs

pid	Process
1592	148D.tmp

Executes dropped EXE 1 IoCs

pid	Process
1592	148D.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2116 wrote to memory of 1592	2116	2024-01-24_2155394fe46050fcbdcf414d221b8f20_mafia.exe	88
PID 2116 wrote to memory of 1592	2116	2024-01-24_2155394fe46050fcbdcf414d221b8f20_mafia.exe	88
PID 2116 wrote to memory of 1592	2116	2024-01-24_2155394fe46050fcbdcf414d221b8f20_mafia.exe	88

C:\Users\Admin\AppData\Local\Temp\2024-01-24_2155394fe46050fcbdcf414d221b8f20_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-24_2155394fe46050fcbdcf414d221b8f20_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2116
- C:\Users\Admin\AppData\Local\Temp\148D.tmp
  "C:\Users\Admin\AppData\Local\Temp\148D.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-01-24_2155394fe46050fcbdcf414d221b8f20_mafia.exe 84D543841F0B724383F9D4E7F46B2A5078961AFC7B7473FF8ED23959565578BCCD2714C0D36D2C7309FCB399DD1AD8E302742A834C8F54863A5BCCF5011CC0ED
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:1592

C:\Users\Admin\AppData\Local\Temp\148D.tmp

Filesize
384KB

MD5
3445224017357bbe204230d56118f4ce

SHA1
4530f495119ee3a4afa4095261516609b7828703

SHA256
185d4332c6790da3f9ac4c759677ed0cea286ae366f9d2a5d49d1179945b710a

SHA512
4610ac7069bab50cd0e81fe7482378ef6ffa228b0480cfc291b4e28612eb458a9afd263cb1d5926e4d39a2785c618068585554f9567ef09b1d2c53e3c754bb4a

Download Submit