f912b1c96c806f3e71cee756e0b75cce931cc68ad02f713acad488fabea90d4e

Analysis

max time kernel
137s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
28/01/2024, 01:33

Target

2024-01-28_685f355f89dcb8eb902e6c9c23813c0b_mafia.exe
Size

433KB
MD5

685f355f89dcb8eb902e6c9c23813c0b
SHA1

42f4e9b8eee4190ee48ca05b36fcb06ea01cfb41
SHA256

f912b1c96c806f3e71cee756e0b75cce931cc68ad02f713acad488fabea90d4e
SHA512

536f583ebd35df4bc5d12943068d23a7a908b4c2caa105b1f9179f0909fcc6d7716dea7e195919e79f034e42492e6d5d3db29c07a57f5f2830010325e1df686a
SSDEEP

12288:Ci4g+yU+0pAiv+I07FvUV/moIH+W85qn8gC5n:Ci4gXn0pD+H+V1CvYgCh

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2800	4B41.tmp

Executes dropped EXE 1 IoCs

pid	Process
2800	4B41.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5012 wrote to memory of 2800	5012	2024-01-28_685f355f89dcb8eb902e6c9c23813c0b_mafia.exe	86
PID 5012 wrote to memory of 2800	5012	2024-01-28_685f355f89dcb8eb902e6c9c23813c0b_mafia.exe	86
PID 5012 wrote to memory of 2800	5012	2024-01-28_685f355f89dcb8eb902e6c9c23813c0b_mafia.exe	86

C:\Users\Admin\AppData\Local\Temp\2024-01-28_685f355f89dcb8eb902e6c9c23813c0b_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-28_685f355f89dcb8eb902e6c9c23813c0b_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5012
- C:\Users\Admin\AppData\Local\Temp\4B41.tmp
  "C:\Users\Admin\AppData\Local\Temp\4B41.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-28_685f355f89dcb8eb902e6c9c23813c0b_mafia.exe 175FDED972326438389A2C54F078AE99B39B8F4DDE6AF667D294254A1A0315D5313BA6FE6FD7FB13EFD021D2FBAFECD0931B8B31609856A7C6AE67955AFD8700
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2800

C:\Users\Admin\AppData\Local\Temp\4B41.tmp

Filesize
433KB

MD5
436a96a0068d926a7cb273173fa291f5

SHA1
60b7028247f846e21c6217f4b9eec8aa45a8319b

SHA256
cbb8cbe485cdce80e177819e6735fa2795693a34996c61634c62522ba747d05c

SHA512
7dbd2e5bb27e955291f0b6310e805bc01f29a786cb53eb1d76a804a53c3c01fad0cb7de729575df38e5a943fc81918556487c9ea43311dc3dab2ec0f65868d31

Download Submit