dda04abeedf62c86a733bfcfb7a5bc845d4ead9f5a39d96028a228893f52623e

Analysis

max time kernel
145s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
04/02/2024, 19:42

Target

2024-02-04_d9d3039970b4de8f0f296f34b18cd2d2_mafia.exe
Size

486KB
MD5

d9d3039970b4de8f0f296f34b18cd2d2
SHA1

ee96702943c5e3979fe30f11c7234a7feadbe4c4
SHA256

dda04abeedf62c86a733bfcfb7a5bc845d4ead9f5a39d96028a228893f52623e
SHA512

7c8b97b50030ac76670a876dc99e706d27efd2fbfc26f04e11a3b1e04c1e389566e37bea36d139dab562986baaf4105eb93633c988c650ceab6682a1d018dcc3
SSDEEP

12288:3O4rfItL8HP/1HQyNibpbrtrMA/aiCX7rKxUYXhW:3O4rQtGP/1HQIip+r3KxUYXhW

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3284	46BD.tmp

Executes dropped EXE 1 IoCs

pid	Process
3284	46BD.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3604 wrote to memory of 3284	3604	2024-02-04_d9d3039970b4de8f0f296f34b18cd2d2_mafia.exe	85
PID 3604 wrote to memory of 3284	3604	2024-02-04_d9d3039970b4de8f0f296f34b18cd2d2_mafia.exe	85
PID 3604 wrote to memory of 3284	3604	2024-02-04_d9d3039970b4de8f0f296f34b18cd2d2_mafia.exe	85

C:\Users\Admin\AppData\Local\Temp\2024-02-04_d9d3039970b4de8f0f296f34b18cd2d2_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-04_d9d3039970b4de8f0f296f34b18cd2d2_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3604
- C:\Users\Admin\AppData\Local\Temp\46BD.tmp
  "C:\Users\Admin\AppData\Local\Temp\46BD.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-04_d9d3039970b4de8f0f296f34b18cd2d2_mafia.exe 9B10EC9BF4C5771F7C2C01480FA28FD2A4D760335376BA4261D79B1709AF856988DF447C9E23EDBD5D6153B1976C125E2AA6E87C472FF16A33C3309955281CAC
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3284

C:\Users\Admin\AppData\Local\Temp\46BD.tmp

Filesize
486KB

MD5
2becf7d452597e010affab2b3f1edf73

SHA1
8207d00a09c8ccccd231ac860c3697d2a2035881

SHA256
a0a93c61ddd69585a3346a5881a33ea53470bccb2350bd6f9bd236359a255c01

SHA512
042581ef64db207a30025cfc79493bbd240dbc2cc0470425dc6792bc941d06bbc68e71c2d64933efba7c6a897ef922f18af33a61f08c21647241edd1a26b9a81

Download Submit