000a9d5c78a9a95452405d96deec06b7140c126c16e1976175c43e432f305ca8

Analysis

max time kernel
92s
max time network
121s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
25/01/2024, 19:36

Target

2024-01-25_d2229f5accea873be18f82021c6a7c82_mafia.exe
Size

486KB
MD5

d2229f5accea873be18f82021c6a7c82
SHA1

a63315455ab48bd2db5419f4d69809ddf913dc51
SHA256

000a9d5c78a9a95452405d96deec06b7140c126c16e1976175c43e432f305ca8
SHA512

cfb8e66d8c7a32412a0dcb0bc5fceba640d59ac83a89c9945f6ea5ab385cb4255a030af4b165e187bd197ef07b3dab88b5b424ceb2d35a9700ada96b8fcb2adf
SSDEEP

12288:3O4rfItL8HPZGylLdgxlu1wNUxyxdos3S+kRv7rKxUYXhW:3O4rQtGPZlLKxlu1AO3KxUYXhW

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2820	3CEA.tmp

Executes dropped EXE 1 IoCs

pid	Process
2820	3CEA.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2920 wrote to memory of 2820	2920	2024-01-25_d2229f5accea873be18f82021c6a7c82_mafia.exe	84
PID 2920 wrote to memory of 2820	2920	2024-01-25_d2229f5accea873be18f82021c6a7c82_mafia.exe	84
PID 2920 wrote to memory of 2820	2920	2024-01-25_d2229f5accea873be18f82021c6a7c82_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-01-25_d2229f5accea873be18f82021c6a7c82_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-25_d2229f5accea873be18f82021c6a7c82_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2920
- C:\Users\Admin\AppData\Local\Temp\3CEA.tmp
  "C:\Users\Admin\AppData\Local\Temp\3CEA.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-25_d2229f5accea873be18f82021c6a7c82_mafia.exe D3302B25560774CD76C2BD1A8D0B7C5D2C5567F81543A3A7F55D05388B8BEF0A624B172F18F871BE55EFE49C1B7BA799B54B2A3551D0BFF4ACBF237CA6375649
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2820

C:\Users\Admin\AppData\Local\Temp\3CEA.tmp

Filesize
486KB

MD5
07d43fe6742809cb7cced0e83cf5bd29

SHA1
82f1e42484f9e721841c39c79f22e735a83cfae4

SHA256
4055c0fad6e4d11155935ec8a59a92a29bf1202bd2bcf174653685c07395ee27

SHA512
c860a7995c490592622bc793be62e328509d0c1175993d516606704d7613f534f74b3d5d41f63fa6bd07da6db5ce9d654e79f6f832031e80fabf3aac65a5ce79

Download Submit