b09681b13598db22bcf3920f8fb8252ee22d9ed4c89473e94ee95cf78b20afe0

Analysis

max time kernel
88s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
26/01/2024, 00:43

Target

2024-01-26_daad304f642dae5c8be1c6fe0a02e11e_mafia.exe
Size

433KB
MD5

daad304f642dae5c8be1c6fe0a02e11e
SHA1

3987def48bdcbf6d387d379db65f2671ba591939
SHA256

b09681b13598db22bcf3920f8fb8252ee22d9ed4c89473e94ee95cf78b20afe0
SHA512

93a3e6f8a3a3fffdc1606f6721e2c23a3a231bfba754d3f5eb47f1b7eb70feb55b7173e82d193a11afb97faacaf9b4cf0b76cad758fb486b421d331c27972979
SSDEEP

12288:Ci4g+yU+0pAiv+FpzIJQdQxXKPioxN1CVDq1BKwSn:Ci4gXn0pD+HzIC5lYVDq1Bg

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4688	4F87.tmp

Executes dropped EXE 1 IoCs

pid	Process
4688	4F87.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4404 wrote to memory of 4688	4404	2024-01-26_daad304f642dae5c8be1c6fe0a02e11e_mafia.exe	87
PID 4404 wrote to memory of 4688	4404	2024-01-26_daad304f642dae5c8be1c6fe0a02e11e_mafia.exe	87
PID 4404 wrote to memory of 4688	4404	2024-01-26_daad304f642dae5c8be1c6fe0a02e11e_mafia.exe	87

C:\Users\Admin\AppData\Local\Temp\2024-01-26_daad304f642dae5c8be1c6fe0a02e11e_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-26_daad304f642dae5c8be1c6fe0a02e11e_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4404
- C:\Users\Admin\AppData\Local\Temp\4F87.tmp
  "C:\Users\Admin\AppData\Local\Temp\4F87.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-26_daad304f642dae5c8be1c6fe0a02e11e_mafia.exe 8CE22F005625E77FD59E8A32E0FDE7C01C10F28ABFBE8A64FFDFC9870F18A7883FA55A553DD5FE321E4A3DF9069BE13C638A9B14EF3921FCA8EC05842B3AA0EB
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4688

C:\Users\Admin\AppData\Local\Temp\4F87.tmp

Filesize
433KB

MD5
307fb29ee8d336305be9bcb62b47b4cb

SHA1
6720e3b54d6fb99647bf23ec4df75f117ca65912

SHA256
f9d05446f67a1922c51d11e94112d595fa1c2d3dab083ee03ebe78d9030ca6a9

SHA512
db34d34ffb78f9977d4cd2eb5baae9c612966ba2c89fc280d243e6683cbe5edfe292ed52f0a1fb83d9a1f706bf02466401287fa75da49b9d7b8f900c5ad7cd75

Download Submit