794c837d561475fd3c8970f4dbca24991e21c8c04d4b10b829bc980a8f0e42f3

Analysis

max time kernel
144s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
27/01/2024, 00:39

Target

2024-01-27_c59956f0b6b9a1318e84acb1fe49917b_mafia.exe
Size

428KB
MD5

c59956f0b6b9a1318e84acb1fe49917b
SHA1

067d085dc7cda0c4477d1404e0fd6907f3b68613
SHA256

794c837d561475fd3c8970f4dbca24991e21c8c04d4b10b829bc980a8f0e42f3
SHA512

65885bf1cd59e7b751ed9ad7c66abd9995275413c25fa40041c0e6022fa37d8b5089541f5c6099f847bfe0a12398d4069b4dd2f61abfe049e10cae3539b5cded
SSDEEP

12288:Z594+AcL4tBekiuKzErpOin5IqKndQ0IJl:BL4tBekiuVrMi5Iq+S0W

Score

7^/10

Deletes itself 1 IoCs

pid	Process
1932	50A0.tmp

Executes dropped EXE 1 IoCs

pid	Process
1932	50A0.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4000 wrote to memory of 1932	4000	2024-01-27_c59956f0b6b9a1318e84acb1fe49917b_mafia.exe	86
PID 4000 wrote to memory of 1932	4000	2024-01-27_c59956f0b6b9a1318e84acb1fe49917b_mafia.exe	86
PID 4000 wrote to memory of 1932	4000	2024-01-27_c59956f0b6b9a1318e84acb1fe49917b_mafia.exe	86

C:\Users\Admin\AppData\Local\Temp\2024-01-27_c59956f0b6b9a1318e84acb1fe49917b_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-27_c59956f0b6b9a1318e84acb1fe49917b_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4000
- C:\Users\Admin\AppData\Local\Temp\50A0.tmp
  "C:\Users\Admin\AppData\Local\Temp\50A0.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-27_c59956f0b6b9a1318e84acb1fe49917b_mafia.exe 8B758E4F211F55356F657FBEEBC712C57A0B78D6BBA945B91068CFDA16D22EB82C952FE3E395DC5A38E4254F9E2349F83BC4C0A2489D2B1CB80F7E7BA81A9D53
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:1932

C:\Users\Admin\AppData\Local\Temp\50A0.tmp

Filesize
428KB

MD5
a6c48f3e0c0e824f7098e5052a07b0b5

SHA1
95aab16caf0d7e6639f3fdcc812a1bc75f819df0

SHA256
a8da378ea5a5a7300e7ad1e9995a83fd0727950f26196b81aeffb6ba6e28b15d

SHA512
8e5e9b2d5451763d743030ae504d4c960fb4adabb21bf9a85652cf03317fd45910fe6ca2a83ac31d7072f5772897ff291fb6c9d9535aad55d2f7360b4bb3126c

Download Submit