d069050ef2cfe73c3f79ac34da59648668a577bfc4e2118f51fac44c83b390f1

Analysis

max time kernel
142s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
13-02-2024 08:18

Target

2024-02-13_da297bbe67d01c1e39386d5917989ee1_mafia.exe
Size

476KB
MD5

da297bbe67d01c1e39386d5917989ee1
SHA1

fe9cc2a72b7f1394578f8b09885775c868328696
SHA256

d069050ef2cfe73c3f79ac34da59648668a577bfc4e2118f51fac44c83b390f1
SHA512

2f1da88d411bc39cd08dddd4de7c3b70e708e00e1e332c1ab5714f9a3609180a8a632ae06a9b46337ac3ae3d596fcfb8987b48187f2e04f1af1006b66f3b29f3
SSDEEP

12288:aO4rfItL8HRuGW2Yd9QQgny2KNG7K9wlsDpVFd:aO4rQtGR3eWVK8+9wlsDpVFd

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2416	6699.tmp

Executes dropped EXE 1 IoCs

pid	Process
2416	6699.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 212 wrote to memory of 2416	212	2024-02-13_da297bbe67d01c1e39386d5917989ee1_mafia.exe	84
PID 212 wrote to memory of 2416	212	2024-02-13_da297bbe67d01c1e39386d5917989ee1_mafia.exe	84
PID 212 wrote to memory of 2416	212	2024-02-13_da297bbe67d01c1e39386d5917989ee1_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-02-13_da297bbe67d01c1e39386d5917989ee1_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-13_da297bbe67d01c1e39386d5917989ee1_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:212
- C:\Users\Admin\AppData\Local\Temp\6699.tmp
  "C:\Users\Admin\AppData\Local\Temp\6699.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-13_da297bbe67d01c1e39386d5917989ee1_mafia.exe 6582F1A8BD568CFA68A93B7C126998F215C27A2422111FAE59D0B9A3B5A396C919FA9646E3AF97ECC6F86F60161A95E3018F0E1FEDC25200CDD2C5BBBA47FF5D
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2416

C:\Users\Admin\AppData\Local\Temp\6699.tmp

Filesize
476KB

MD5
9da07b77ca2bdcb67655b2694dab5ed8

SHA1
b006ff85c43e05cd3fadbe8bcbe71c73d1a0553e

SHA256
d66370d51c98be19d9eb0b9c03b03ee569973ef2d216b503d4bbf115b2d637d2

SHA512
cce4061794a90fb950901bc5dda569cdbbfcb0d6d4f57a432ce794800af3467aaae003d88e564b8d49e25def0e4f1b03a9f3ae7eeaf1bf7ea1c75327774dc223

Download Submit