bf02de9ece61f689de83d04c623313896cadd25af184f7a10065b4b7eb64f0c2

Analysis

max time kernel
145s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
26/01/2024, 09:38

Target

2024-01-26_fb64a8b7619b7332ee11bd199d8c67a5_mafia.exe
Size

384KB
MD5

fb64a8b7619b7332ee11bd199d8c67a5
SHA1

3b5832e1716fd0d999ac3e21bd41dfae9a5f3bf4
SHA256

bf02de9ece61f689de83d04c623313896cadd25af184f7a10065b4b7eb64f0c2
SHA512

1491be32cd7ff9858be1ba82aded1a0c06c417cf82788396a6745a43dd26feebfd9971638dd9a4b68f7220b94b9bd9fc115e382e606f7205b56db6ecae065885
SSDEEP

6144:drxfv4co9ZL3GBGgjODxbf7hHsUwGayJdxT2sEm5vTWIdPciQ4IXMbDdPRBEVZ:Zm48gODxbzlDjB2jm5bDP9QpoDdPoVZ

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2504	80C9.tmp

Executes dropped EXE 1 IoCs

pid	Process
2504	80C9.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 240 wrote to memory of 2504	240	2024-01-26_fb64a8b7619b7332ee11bd199d8c67a5_mafia.exe	88
PID 240 wrote to memory of 2504	240	2024-01-26_fb64a8b7619b7332ee11bd199d8c67a5_mafia.exe	88
PID 240 wrote to memory of 2504	240	2024-01-26_fb64a8b7619b7332ee11bd199d8c67a5_mafia.exe	88

C:\Users\Admin\AppData\Local\Temp\2024-01-26_fb64a8b7619b7332ee11bd199d8c67a5_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-26_fb64a8b7619b7332ee11bd199d8c67a5_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:240
- C:\Users\Admin\AppData\Local\Temp\80C9.tmp
  "C:\Users\Admin\AppData\Local\Temp\80C9.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-01-26_fb64a8b7619b7332ee11bd199d8c67a5_mafia.exe 71358113D5A55D08AB3154EF5870DCCF7789996F2715CEF05D7A893D2B2B7EBAD2468E9E1802FB8B993EDAF161B855960D0573D38823D79758254BBACC98624A
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2504

C:\Users\Admin\AppData\Local\Temp\80C9.tmp

Filesize
384KB

MD5
ff41eb317cc66cafcfdb4a013b0f2d6b

SHA1
3ede79ddfe12acd0b9b51c27d4967dfc5862b7f9

SHA256
29fed23cd0b88ab4641fba48ca109ffbd0e3514a35d6958a545765a159fc5e58

SHA512
7bcee8c542a2b560d8904fe8e3db46f8267dd85d6f9975eaa77e424f83b33e91c96d608dc64e1f81ae50cdb39922ccdcc1bb7ddaf74745a685a122be7d12f842

Download Submit