8015ba9e8a4bcb42d7e422b4b178b0dc4ad1bbd2544b8a2bf668fe73841ddfb8

Analysis

max time kernel
93s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
17/02/2024, 08:55

Target

2024-02-17_f7e7f553c9d0320ef2cb0b8c071b31f1_mafia.exe
Size

479KB
MD5

f7e7f553c9d0320ef2cb0b8c071b31f1
SHA1

d8ceb6d59566e89cfb2590a2ce2675d892c10511
SHA256

8015ba9e8a4bcb42d7e422b4b178b0dc4ad1bbd2544b8a2bf668fe73841ddfb8
SHA512

c801bcefb9c99be6592a9705fac78966bccb9671b50da73f81bd051e28eb8742832da6e211345efe9b2b1f415db08d036ad60ee60f1ec6ebb35be2dc629b2255
SSDEEP

12288:bO4rfItL8HAsvWy7Jv/hBIDxEr6qO1ExKy75UO:bO4rQtGA4XJMDsaExKyVUO

Score

7^/10

Deletes itself 1 IoCs

pid	Process
1144	4640.tmp

Executes dropped EXE 1 IoCs

pid	Process
1144	4640.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2028 wrote to memory of 1144	2028	2024-02-17_f7e7f553c9d0320ef2cb0b8c071b31f1_mafia.exe	85
PID 2028 wrote to memory of 1144	2028	2024-02-17_f7e7f553c9d0320ef2cb0b8c071b31f1_mafia.exe	85
PID 2028 wrote to memory of 1144	2028	2024-02-17_f7e7f553c9d0320ef2cb0b8c071b31f1_mafia.exe	85

C:\Users\Admin\AppData\Local\Temp\2024-02-17_f7e7f553c9d0320ef2cb0b8c071b31f1_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-17_f7e7f553c9d0320ef2cb0b8c071b31f1_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2028
- C:\Users\Admin\AppData\Local\Temp\4640.tmp
  "C:\Users\Admin\AppData\Local\Temp\4640.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-17_f7e7f553c9d0320ef2cb0b8c071b31f1_mafia.exe 090D5D524EE0ADE16E0F6633D4CCDB7B1DC90195FD595ED0E03F06D0030385954E16F17CC711C674128C69E9690030F39B45D7150B486834942BD8D7F3FD4429
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:1144

C:\Users\Admin\AppData\Local\Temp\4640.tmp

Filesize
479KB

MD5
bb12ebb8937bcc833ddae0fd90038885

SHA1
92ea4b681a219e97ab8c5d234556694d64e415af

SHA256
a747de2f45b07a513328f7782d0953e91a3c4d13342ec62f2c94ef343e17e884

SHA512
3ab9408ba0055e7cfab9e3fcce3c0c3b0608d54cdae55bb1fbf8c13b176cec232ae05d061d4e633aa94b4adc830e981c57f95bb3e1e902b03d5cf2b1e98846ff

Download Submit