6bb9aeb1118509977e995f8d32333d885983bcce1da1ce6d6c26b322ca39df25

Analysis

max time kernel
133s
max time network
173s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
13/02/2024, 19:33

Target

2024-02-13_65193d864f0420db5f17c96b11baeff9_mafia.exe
Size

486KB
MD5

65193d864f0420db5f17c96b11baeff9
SHA1

b87c7842839d9544f991b409856428d2b15ee662
SHA256

6bb9aeb1118509977e995f8d32333d885983bcce1da1ce6d6c26b322ca39df25
SHA512

cc03c05a54fd5f33c27790d7469b1f1db81164df3c63caea1acb5cf266d2b47a7d985c9fa6f7b93530628e2972c1a6b66a3b58489ae2be320251d0f788675b07
SSDEEP

12288:3O4rfItL8HPOnRXiEPBWFi+YWPKd67rKxUYXhW:3O4rQtGPmXNWI+/463KxUYXhW

Score

7^/10

Deletes itself 1 IoCs

pid	Process
1808	124B.tmp

Executes dropped EXE 1 IoCs

pid	Process
1808	124B.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3292 wrote to memory of 1808	3292	2024-02-13_65193d864f0420db5f17c96b11baeff9_mafia.exe	84
PID 3292 wrote to memory of 1808	3292	2024-02-13_65193d864f0420db5f17c96b11baeff9_mafia.exe	84
PID 3292 wrote to memory of 1808	3292	2024-02-13_65193d864f0420db5f17c96b11baeff9_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-02-13_65193d864f0420db5f17c96b11baeff9_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-13_65193d864f0420db5f17c96b11baeff9_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3292
- C:\Users\Admin\AppData\Local\Temp\124B.tmp
  "C:\Users\Admin\AppData\Local\Temp\124B.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-13_65193d864f0420db5f17c96b11baeff9_mafia.exe 09A7287D79AF3FBF4066855351427E9BE5C4283151AE7181CAC6E4037D6F7DCC6003D2D14ACE7F07FCDEED7F19AF6A462C27955EF45961E334CC84B8D767666F
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:1808

C:\Users\Admin\AppData\Local\Temp\124B.tmp

Filesize
486KB

MD5
b46a185ffa615cbb3b38227f60fbdf9c

SHA1
5e18934e6975e2c47d77ed6aa05e26bf77785f12

SHA256
0f246e2ef3211ddda853af3d2f0d1492b08a53d29ba733cd7e66d5ddc5b828ac

SHA512
9fad1f7ca20b726e0faa0bd75597b2d7e3a8249ca765b7fa5705453dc69de3fd8a4c75998ea73cb874176c0dbb7f0b4a2dae6e137180248222990b6ee7120fb1

Download Submit