764cf0ed13e7945dc2a7e982d82fec303a6e6acd79caaa7e8adfb647584be281

Analysis

max time kernel
143s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26/01/2024, 12:26

Target

2024-01-26_3cb74e76f8b0b548ddbdd7c7360edf31_mafia.exe
Size

433KB
MD5

3cb74e76f8b0b548ddbdd7c7360edf31
SHA1

a400e8b62abd7f3a8cbdb856b7892c0dc493519b
SHA256

764cf0ed13e7945dc2a7e982d82fec303a6e6acd79caaa7e8adfb647584be281
SHA512

7d95eb7a8b7a3a0ae2f6734015a1bf850e011134bb2998950c145b9187d7e9b4210095517be051fc16cf91fb49e9b0c8319da36ea131c54ba0ddd177e92d72f1
SSDEEP

6144:Cajdz4sTdDyyqiOXpOd0p6Jiv+vtvuFc56tQNxpaQ2sT8W+BNP1+Wr+AS43xitn:Ci4g+yU+0pAiv+xYsN+XN+BEktn

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3548	639C.tmp

Executes dropped EXE 1 IoCs

pid	Process
3548	639C.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2500 wrote to memory of 3548	2500	2024-01-26_3cb74e76f8b0b548ddbdd7c7360edf31_mafia.exe	86
PID 2500 wrote to memory of 3548	2500	2024-01-26_3cb74e76f8b0b548ddbdd7c7360edf31_mafia.exe	86
PID 2500 wrote to memory of 3548	2500	2024-01-26_3cb74e76f8b0b548ddbdd7c7360edf31_mafia.exe	86

C:\Users\Admin\AppData\Local\Temp\2024-01-26_3cb74e76f8b0b548ddbdd7c7360edf31_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-26_3cb74e76f8b0b548ddbdd7c7360edf31_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2500
- C:\Users\Admin\AppData\Local\Temp\639C.tmp
  "C:\Users\Admin\AppData\Local\Temp\639C.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-26_3cb74e76f8b0b548ddbdd7c7360edf31_mafia.exe 2A74C84F846093ED91AFDACEF65DF65130F444A52E828D367FC36648A1DEE1A6F65EDA05FD75D5A90C4403EC48A921A644A37A46675F83D607A9186BDCB03CDB
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3548

C:\Users\Admin\AppData\Local\Temp\639C.tmp

Filesize
433KB

MD5
5d381b47999e1c8bf7da06cdfa8593b5

SHA1
95111ae801fe16071b38789e0d26ee6598aa4cd8

SHA256
f3fbb2171c27e381398aa2a49d94b76722fc3af16991db8ed19fdc6700cec558

SHA512
89a6ac0f594b2a87d1d0272ce7de106e10f03e2e3d26f3bb079147337d068dcc130c786c75bf240845a6447910e015cef3915db72bdccd6fa46877f3e452a5bd

Download Submit