c006d2aab41ff62d5a1b835b3af17ba2a6e4c5aeff472c600d04df4e56779a2f

Analysis

max time kernel
142s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
29/01/2024, 01:04

Target
2024-01-29_40f2d76d089df3bf416a7a2f14be4597_mafia.exe
Size 468KB
Sample240129-be2qrsefc8
SHA256 c006d2aab41ff62d5a1b835b3af17ba2a6e4c5aeff472c600d04df4e56779a2f
MD5 40f2d76d089df3bf416a7a2f14be4597
SHA1 b2ccaf5e0297851a5a6978ad61735ec1647c48e4
SHA512 d6ddcbb6f2177f618273556e47880d38a2721ec12593476591d975841db8ac22222e462513a22095563d8e6dcf1db49d463b8be13775035370f257fb9a503699
SSDEEP 12288:qO4rfItL8HGc3AlM6UxoWNPjiIKgaIevmTvJdKlh7bWmeEVGL:qO4rQtGGc/tHNaIevMd6humeEVGL
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4504	6D8F.tmp

Executes dropped EXE 1 IoCs

pid	Process
4504	6D8F.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1412 wrote to memory of 4504	1412	2024-01-29_40f2d76d089df3bf416a7a2f14be4597_mafia.exe	84
PID 1412 wrote to memory of 4504	1412	2024-01-29_40f2d76d089df3bf416a7a2f14be4597_mafia.exe	84
PID 1412 wrote to memory of 4504	1412	2024-01-29_40f2d76d089df3bf416a7a2f14be4597_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-01-29_40f2d76d089df3bf416a7a2f14be4597_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-29_40f2d76d089df3bf416a7a2f14be4597_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1412
- C:\Users\Admin\AppData\Local\Temp\6D8F.tmp
  "C:\Users\Admin\AppData\Local\Temp\6D8F.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-29_40f2d76d089df3bf416a7a2f14be4597_mafia.exe 692FAA1C75AF54C499AB31BF191EE6C0924E5CD87698F13562FCA57B4099B2D958C99A9BEF7E18D4AA890C595B80F8714C6A917DB4B588D3759C12E3C8FCB6A4
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4504

6D8F.tmp

Path C:\Users\Admin\AppData\Local\Temp\6D8F.tmp
Size 468KB
SHA256 43c223055e43089578b50817b97df1335a9e077d051654458b85213bff8254aa
MD5 dc0ea75a190245ddd81e455d15b9eb10
SHA1 5f88f5d7ee0666e06eb72c92e576f6f3a3cfce1d
SHA512 f51a9b0e7391c7e54257cb95e2822e732b2658b993b7e2fbd6fb32cce312fb9a70f3a09b2b7ddf323b5a0102ce4e0c31d2ea8b526d066a7c01ec11b6eba11900
SSDEEP 12288:qO4rfItL8HGMjuWvrRjhJP/9wDXkLmG7bWmeEVGL:qO4rQtGGMdRlJP/9w7kLmGumeEVGL
MD5 SHA1 SHA512 SSDEEP

Submit Download