7fea62c76b910a801480d2de7e3f82ac8b4c6de823780ec42952f3dc77cc1ecd

Analysis

max time kernel
90s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
17/02/2024, 14:27

Target

2024-02-17_47914c8f51aa0c25df72997c56429a2c_mafia.exe
Size

479KB
MD5

47914c8f51aa0c25df72997c56429a2c
SHA1

9e134040ed52c91da9957d405b849b65adad154a
SHA256

7fea62c76b910a801480d2de7e3f82ac8b4c6de823780ec42952f3dc77cc1ecd
SHA512

49454f39f032c00161cd255b21575555eab72a0ffb6ecfdd10b03fdb235a452cedd11375e9ad43ca8a3e1da578bf3a77c179b553a73d5969eea3cb947647133b
SSDEEP

12288:bO4rfItL8HAsz0Wg0rY7+81IC0AbYqX4v08Nks75UO:bO4rQtGAszzbrY7/ICOqXopVUO

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4820	7242.tmp

Executes dropped EXE 1 IoCs

pid	Process
4820	7242.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3196 wrote to memory of 4820	3196	2024-02-17_47914c8f51aa0c25df72997c56429a2c_mafia.exe	84
PID 3196 wrote to memory of 4820	3196	2024-02-17_47914c8f51aa0c25df72997c56429a2c_mafia.exe	84
PID 3196 wrote to memory of 4820	3196	2024-02-17_47914c8f51aa0c25df72997c56429a2c_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-02-17_47914c8f51aa0c25df72997c56429a2c_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-17_47914c8f51aa0c25df72997c56429a2c_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3196
- C:\Users\Admin\AppData\Local\Temp\7242.tmp
  "C:\Users\Admin\AppData\Local\Temp\7242.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-17_47914c8f51aa0c25df72997c56429a2c_mafia.exe 409154FA1E6483B41ACEDFE6FEE93F787208E55AB7DFB2E5147DB539D8BB31896A66E117366E60C5B178249CD7923AEDEEDD60D812C91CE52B4E9992243E56B6
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4820

C:\Users\Admin\AppData\Local\Temp\7242.tmp

Filesize
479KB

MD5
9988dad9f4199683d0428b6a0237ce5f

SHA1
016496955f638136f97591cd5aab9a2b4e01aca6

SHA256
4e346fe566a7e535936359c4ef10096712eb86e361aa36492909ce66f1812a9b

SHA512
ba0d58013c3769fb594c114fc192a7bc31c2338cf075f831c1aaca02c3a9a8fe9341bb183f35237abe82a7c9672a41580e09ebde87275dba5b982e8990299dc8

Download Submit