094907f9da90f5101643e9bd29d07bf8eda3e53db9f58f2c3462cf79c4ee7424

Analysis

max time kernel
93s
max time network
120s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
03/02/2024, 05:42

Target

2024-02-03_d41836452041f3b6cc22c2e45fa3e43a_mafia.exe
Size

433KB
MD5

d41836452041f3b6cc22c2e45fa3e43a
SHA1

e2ab2ef3547b069149711ed210ab970e92247edc
SHA256

094907f9da90f5101643e9bd29d07bf8eda3e53db9f58f2c3462cf79c4ee7424
SHA512

04ffb1ef65431f35d36feb7b4e966d7a754423dffa760a550b44c67ebf2aa47bbe234298f377416ed6c4c37a27cd50ee01452026cff6629426b56789dcb79fa2
SSDEEP

12288:Ci4g+yU+0pAiv+kQJy17eEbotkPBWti5P/hyVfjDYn:Ci4gXn0pD+nJebotkn5xijs

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2780	887.tmp

Executes dropped EXE 1 IoCs

pid	Process
2780	887.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4476 wrote to memory of 2780	4476	2024-02-03_d41836452041f3b6cc22c2e45fa3e43a_mafia.exe	84
PID 4476 wrote to memory of 2780	4476	2024-02-03_d41836452041f3b6cc22c2e45fa3e43a_mafia.exe	84
PID 4476 wrote to memory of 2780	4476	2024-02-03_d41836452041f3b6cc22c2e45fa3e43a_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-02-03_d41836452041f3b6cc22c2e45fa3e43a_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-03_d41836452041f3b6cc22c2e45fa3e43a_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4476
- C:\Users\Admin\AppData\Local\Temp\887.tmp
  "C:\Users\Admin\AppData\Local\Temp\887.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-03_d41836452041f3b6cc22c2e45fa3e43a_mafia.exe 85C7BA3B9FA981C80F52C61D2C7BBDE64EB1ECEADF2E74BDFECC589289EC3D39C7ED7E62AE6EF217F1C0DD1B8F4D9DE2B9CC06BBC730AC652A81EBB717A5C41C
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2780

C:\Users\Admin\AppData\Local\Temp\887.tmp

Filesize
433KB

MD5
51bbb86f2e1b406dd96eb83e6f3dcb00

SHA1
f9f8cd8ca8f03cf0871724e39db47bf0ce13e480

SHA256
950b13ae8a5c6594ee1c4ca960f1cb01e1cc544f64c7d440af4d95e13fa95024

SHA512
f1dd27e3682f6ef6b25ae8e0f8b429ab30f156a07d1900328cfe2fcb4d7baa152e5cd7382e0be9d0ce7c21312b2f8fea8ed17411feb7f31adc27683e2c60f665

Download Submit