c394d58d7e6b189aa3028fc4e4d23facfdcc09633cc4b112376b0c1e8ddcbb8b

Analysis

max time kernel
142s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
28/01/2024, 14:41

Target

2024-01-28_cbddbd974813b182ecfaf0c9711dc14e_mafia.exe
Size

428KB
MD5

cbddbd974813b182ecfaf0c9711dc14e
SHA1

12e019e6096584c7d3fda15fc09470550d17a0bd
SHA256

c394d58d7e6b189aa3028fc4e4d23facfdcc09633cc4b112376b0c1e8ddcbb8b
SHA512

f12c10af8b23dceef6fae7f8fd575c9b637959c97f3d476c2fbda025bc7635ad7dc44a12bd96c2e3e2531b1efa508c33b92a9020badbb635da5e1c5111786bd1
SSDEEP

12288:Z594+AcL4tBekiuKzErHIZQDBGUB6cU1sWUsska/Rhl:BL4tBekiuVrHJq11On

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2920	6206.tmp

Executes dropped EXE 1 IoCs

pid	Process
2920	6206.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3568 wrote to memory of 2920	3568	2024-01-28_cbddbd974813b182ecfaf0c9711dc14e_mafia.exe	84
PID 3568 wrote to memory of 2920	3568	2024-01-28_cbddbd974813b182ecfaf0c9711dc14e_mafia.exe	84
PID 3568 wrote to memory of 2920	3568	2024-01-28_cbddbd974813b182ecfaf0c9711dc14e_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-01-28_cbddbd974813b182ecfaf0c9711dc14e_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-28_cbddbd974813b182ecfaf0c9711dc14e_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3568
- C:\Users\Admin\AppData\Local\Temp\6206.tmp
  "C:\Users\Admin\AppData\Local\Temp\6206.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-28_cbddbd974813b182ecfaf0c9711dc14e_mafia.exe EFC541744AC203953B85A4AFBB334194E04A404594D661D0B7B6CB740242933101A4E8CF3B71909404D0811BF83CD09533AC2E59B2B18E427FD21778D732A997
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2920

C:\Users\Admin\AppData\Local\Temp\6206.tmp

Filesize
428KB

MD5
766f35c4771b41f197c91d64c57acb1d

SHA1
799be7f9a989076fe977a8f547978df6463d5df1

SHA256
243b566a7ee956a1240298d1e346a727119e9ca27a7d62a3637e1a350752bb45

SHA512
36c4de28e3447c1906b330bab1aef79b9d3a7fb064883f7e607b7f671c95cc915032d4f5eb9224edaf404d70521578298db38380be842a3b672da98593621dde

Download Submit