1dcfb0ac3841504d4a185d406b72b89bb72762e92cb67e22869c1851793b7b8e

Analysis

max time kernel
91s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
17/02/2024, 05:43

Target

2024-02-17_a07c7a912f18a2317826a90e720d2531_mafia.exe
Size

435KB
MD5

a07c7a912f18a2317826a90e720d2531
SHA1

5ad649a2acea08f14a098ffe22bae48972444f1a
SHA256

1dcfb0ac3841504d4a185d406b72b89bb72762e92cb67e22869c1851793b7b8e
SHA512

4546de22d154ee931c990faa5c844df56422c62761775567e9eb7fa0a1d12c25a67a81b31e281deaea1fa2e90fc3ca514abfe50cfe7c62b65b2a9c1339651c21
SSDEEP

6144:98Xyq4o4aRCTuuqepiq+zQ1mBYPkFWLTD/DALLIdT33LtfiRNJK:9W4ufepiqKQ1m9FWLTDc+rtfUNJ

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3624	466F.tmp

Executes dropped EXE 1 IoCs

pid	Process
3624	466F.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 436 wrote to memory of 3624	436	2024-02-17_a07c7a912f18a2317826a90e720d2531_mafia.exe	85
PID 436 wrote to memory of 3624	436	2024-02-17_a07c7a912f18a2317826a90e720d2531_mafia.exe	85
PID 436 wrote to memory of 3624	436	2024-02-17_a07c7a912f18a2317826a90e720d2531_mafia.exe	85

C:\Users\Admin\AppData\Local\Temp\2024-02-17_a07c7a912f18a2317826a90e720d2531_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-17_a07c7a912f18a2317826a90e720d2531_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:436
- C:\Users\Admin\AppData\Local\Temp\466F.tmp
  "C:\Users\Admin\AppData\Local\Temp\466F.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-17_a07c7a912f18a2317826a90e720d2531_mafia.exe DC64CE264D3A40C214D57E14185E2BE0DE836FA1BE2665E8FA213F4F6048259EF33A4B33DDFF8522AD1E25688B0236CC48D748CF9E31D2B9CB7FBC1D95072ECC
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3624

C:\Users\Admin\AppData\Local\Temp\466F.tmp

Filesize
435KB

MD5
3811f1418b191d47920737afbc4742d2

SHA1
8eaad35667aa141a6fa1ab247cf0825fb1c8462a

SHA256
4180548ecae7f8b0f82f78c61d8d9d7ea6823684abad41591ae8407366cab0d5

SHA512
998a707c74ddd1b64514d41d97a1fb8f79b1d32a9d10944f4e1616131cb2daf779eccfa431fd8c63b61172f20a8b906f54b78f3fefef99948e90fbb27fc767a9

Download Submit