512267f2773b14e46e3d27b3d8c94e297fc3809c2fce8e184188a91767dcd399

Analysis

max time kernel
145s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/01/2024, 10:27

Target

2024-01-25_999f0053105c57319a8cdb20e3040514_mafia.exe
Size

443KB
MD5

999f0053105c57319a8cdb20e3040514
SHA1

10ce81f71df17180e4a348aa1f50874ca6951382
SHA256

512267f2773b14e46e3d27b3d8c94e297fc3809c2fce8e184188a91767dcd399
SHA512

72ea4532b121b4a60358c11e52d75d12608ef10f262c502d3e01593557f93030e45c62697d6c68b4cdc8879081d724158b21c9eb8f59b9730f036988b7f54460
SSDEEP

12288:Wq4w/ekieZgU6SnqnIVzT0EwgGsZec1bXlMa:Wq4w/ekieH6VnIVzT0EweeILP

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2188	3F4B.tmp

Executes dropped EXE 1 IoCs

pid	Process
2188	3F4B.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1648 wrote to memory of 2188	1648	2024-01-25_999f0053105c57319a8cdb20e3040514_mafia.exe	86
PID 1648 wrote to memory of 2188	1648	2024-01-25_999f0053105c57319a8cdb20e3040514_mafia.exe	86
PID 1648 wrote to memory of 2188	1648	2024-01-25_999f0053105c57319a8cdb20e3040514_mafia.exe	86

C:\Users\Admin\AppData\Local\Temp\2024-01-25_999f0053105c57319a8cdb20e3040514_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-25_999f0053105c57319a8cdb20e3040514_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1648
- C:\Users\Admin\AppData\Local\Temp\3F4B.tmp
  "C:\Users\Admin\AppData\Local\Temp\3F4B.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-25_999f0053105c57319a8cdb20e3040514_mafia.exe 6976A9789330FEDECB4565BFA145E7760ECBE2724F366E167845DA3B668B2E2043ED4FE08B6233239FA457F7ADBCCA876FAA3B8382D6EE8CEA4C58B0B7C12604
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2188

C:\Users\Admin\AppData\Local\Temp\3F4B.tmp

Filesize
443KB

MD5
fd9b9f1d67c642c8a8c4ee17384a7adf

SHA1
5edacff4a7e583d0ece50312833a5edab76200c3

SHA256
f9bcf6c5984e0cb8473ecfdeaf80d5ae41d0919deb7ed7bb06f34043578c1347

SHA512
5268bb77477ccbbf3397661992ebb5e8b0b76febf4d1a3c43d0865d4f4726bd9a37a043a1de8353caea3b341e2d9b439f9aa1b4d17bdf9560a46ba5673fde9d3

Download Submit