e3f2e0f35873fb0aae0aeef727dce1db697e1d5ab95b29d611182344e928001f

Analysis

max time kernel
141s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
03/02/2024, 13:32

Target

2024-02-03_9663991a770a8e6276aff578be577b61_mafia.exe
Size

443KB
MD5

9663991a770a8e6276aff578be577b61
SHA1

7562ba14998f7e7001d1f02b566f648de76184f7
SHA256

e3f2e0f35873fb0aae0aeef727dce1db697e1d5ab95b29d611182344e928001f
SHA512

a744f2c682b680d9cd82b1537fb00bae4299822ed94cef7bc58504f484428ecbebeab6425ddbf0e01f87e540cc15273cb10820a75266b1a1d5cbb2862bf73e23
SSDEEP

12288:Wq4w/ekieZgU6Bv8/vHNC0dUNuy4EWqzlMa:Wq4w/ekieH6NcHBUyEWyP

Score

7^/10

Deletes itself 1 IoCs

pid	Process
5016	6AEF.tmp

Executes dropped EXE 1 IoCs

pid	Process
5016	6AEF.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3396 wrote to memory of 5016	3396	2024-02-03_9663991a770a8e6276aff578be577b61_mafia.exe	84
PID 3396 wrote to memory of 5016	3396	2024-02-03_9663991a770a8e6276aff578be577b61_mafia.exe	84
PID 3396 wrote to memory of 5016	3396	2024-02-03_9663991a770a8e6276aff578be577b61_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-02-03_9663991a770a8e6276aff578be577b61_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-03_9663991a770a8e6276aff578be577b61_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3396
- C:\Users\Admin\AppData\Local\Temp\6AEF.tmp
  "C:\Users\Admin\AppData\Local\Temp\6AEF.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-03_9663991a770a8e6276aff578be577b61_mafia.exe F77C35E5FE7C08385FB9D81C16B3D34D246A8E2B623AA17111C33781FF93A887896DE3765B22E4B0F3D6D9AB33F25606D10D03FCC20401554108421741534571
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:5016

C:\Users\Admin\AppData\Local\Temp\6AEF.tmp

Filesize
443KB

MD5
d82ca65a800797897e4914e0aa618d77

SHA1
fc32c7b52c3de50f883a67478efa73b39b81de01

SHA256
172a80a04386820de650e2c209c419484ae5aba82f6190eb30c7fe07b7b888f6

SHA512
2312cdf0b38437d84235254af8418f1134ec36c64e5a9e8be3979da315ba0fc0c9fc75fe1832127e502dc4c48ac3cf53b6f98e4b7cd434972cee31c8c3a8db09

Download Submit