0bba91bce97eb57c99ebb9cbb599baa216cb9ee296c0f72f004d001d88fda8ac

Analysis

max time kernel
144s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
29/01/2024, 09:36

Target

2024-01-29_667e9c349f1138844d9296a83b338b97_mafia.exe
Size

444KB
MD5

667e9c349f1138844d9296a83b338b97
SHA1

9ca80d95a6362f59bb8e32cb95216d42691d321c
SHA256

0bba91bce97eb57c99ebb9cbb599baa216cb9ee296c0f72f004d001d88fda8ac
SHA512

8f0a4c636ee4ec46f159a73a0d4c006a3088547e62612bb540685f4de0fe6d32ef6e2f7a4c9ec2932d45340fc9819fb9bc59b3dd43160034890d3ca5b8f5938b
SSDEEP

12288:Nb4bZudi79L2HrDhBYT1ubg6VQTalPHleP4RA:Nb4bcdkLED/YZubg5T14

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3156	4A67.tmp

Executes dropped EXE 1 IoCs

pid	Process
3156	4A67.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3316 wrote to memory of 3156	3316	2024-01-29_667e9c349f1138844d9296a83b338b97_mafia.exe	86
PID 3316 wrote to memory of 3156	3316	2024-01-29_667e9c349f1138844d9296a83b338b97_mafia.exe	86
PID 3316 wrote to memory of 3156	3316	2024-01-29_667e9c349f1138844d9296a83b338b97_mafia.exe	86

C:\Users\Admin\AppData\Local\Temp\2024-01-29_667e9c349f1138844d9296a83b338b97_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-01-29_667e9c349f1138844d9296a83b338b97_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3316
- C:\Users\Admin\AppData\Local\Temp\4A67.tmp
  "C:\Users\Admin\AppData\Local\Temp\4A67.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-01-29_667e9c349f1138844d9296a83b338b97_mafia.exe 818AEFBC81FA2750A90A19B67D953C2DDA9C7176A9C9B308CF04BD6131BFBF710A61EEC081B8389E5572FED200E45C042E13380865F5B3590E16045C1968C5D0
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3156

C:\Users\Admin\AppData\Local\Temp\4A67.tmp

Filesize
444KB

MD5
16e103654c2299c976269895944e660e

SHA1
2bd8d6b49b9d5f40a87a35b0ba91041d275743a9

SHA256
a49ea851de24e6b3d8afe81cd25d52b61018c8c0c1bff6596dc426e95716ac84

SHA512
d7f5e63bba82e33e55876b603510eb10b42d24cfd4630b21479c212ab06c18707673f2126efd04186d1e437c13919a9bd56374472d8273262c49d20e7af56236

Download Submit