416c9c96c598fe412fd7f7649cec739d69231f12378b7c506707018efc76aebe

Analysis

max time kernel
91s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
14/02/2024, 03:30

Target

2024-02-14_12fbde797a185096346968081565f604_mafia.exe
Size

476KB
MD5

12fbde797a185096346968081565f604
SHA1

5d3d15a71a235a276df4ed16b2fb233d0141ec9e
SHA256

416c9c96c598fe412fd7f7649cec739d69231f12378b7c506707018efc76aebe
SHA512

381231c278a3023568cdff240363ed842707cf2a62fe407822046a67c8c8f27b108a4ab76e1d5e5e1b4d070a06d58c742d443b3698a79201b18d10a75e1066a0
SSDEEP

12288:aO4rfItL8HRHaYBP+nIflLLmfA6kBjl+r7K9wlsDpVFd:aO4rQtGRHaYBh9efkBw+9wlsDpVFd

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3316	3CBB.tmp

Executes dropped EXE 1 IoCs

pid	Process
3316	3CBB.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4004 wrote to memory of 3316	4004	2024-02-14_12fbde797a185096346968081565f604_mafia.exe	86
PID 4004 wrote to memory of 3316	4004	2024-02-14_12fbde797a185096346968081565f604_mafia.exe	86
PID 4004 wrote to memory of 3316	4004	2024-02-14_12fbde797a185096346968081565f604_mafia.exe	86

C:\Users\Admin\AppData\Local\Temp\2024-02-14_12fbde797a185096346968081565f604_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-14_12fbde797a185096346968081565f604_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4004
- C:\Users\Admin\AppData\Local\Temp\3CBB.tmp
  "C:\Users\Admin\AppData\Local\Temp\3CBB.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-14_12fbde797a185096346968081565f604_mafia.exe 8B865A12E852978D3D7EE4C535FF57AA4AF4299231211C7B794BB698A21B0BAE826AA551F41A6C0DD404E05591C35AE2356B6094B6586E78159C9DDC3F1B1266
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3316

C:\Users\Admin\AppData\Local\Temp\3CBB.tmp

Filesize
476KB

MD5
1ce09f784bec28e70e1dc1de809ce5b0

SHA1
a4e87175429a1d4c07a82dd317ef42e1963feebb

SHA256
2734b1be72ad1ca227f8b9f4364f4510c17fff3138c8dd054ad0c8ac2cb6385a

SHA512
edc0e034c14267cbba6e7322861e903a68ab1a677969d4c98cf5e6fcfdc813348ede74ff55cea8470c08ca5524401f0a0d0f88c039456b0410602041ef990515

Download Submit