df50e5b1de918a9fe584f1e8e5920143828c3d948b3c2509bae82056f410a1e4

Analysis

max time kernel
93s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
18-02-2024 23:23

Target

2024-02-18_1dd46333ed922a791919ac44f27dfd62_mafia.exe
Size

384KB
MD5

1dd46333ed922a791919ac44f27dfd62
SHA1

cda92128264832b22b46744b2ff6480d52d1dc4f
SHA256

df50e5b1de918a9fe584f1e8e5920143828c3d948b3c2509bae82056f410a1e4
SHA512

dc9f8aa8285a13e305d04ce6921e9580a8bdaeab414d196183767d213432856df94299a2118a5983db20aa654a94a329357853f254504b7659a68cf0c3c283c9
SSDEEP

6144:drxfv4co9ZL3GBGgjODxbf7hHMvY+baxdcVtbKgzpUe4/zJAZ:Zm48gODxbzSvYNd48IpGJAZ

Score

7^/10

Deletes itself 1 IoCs

pid	Process
1656	A4BC.tmp

Executes dropped EXE 1 IoCs

pid	Process
1656	A4BC.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 232 wrote to memory of 1656	232	2024-02-18_1dd46333ed922a791919ac44f27dfd62_mafia.exe	82
PID 232 wrote to memory of 1656	232	2024-02-18_1dd46333ed922a791919ac44f27dfd62_mafia.exe	82
PID 232 wrote to memory of 1656	232	2024-02-18_1dd46333ed922a791919ac44f27dfd62_mafia.exe	82

C:\Users\Admin\AppData\Local\Temp\2024-02-18_1dd46333ed922a791919ac44f27dfd62_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-18_1dd46333ed922a791919ac44f27dfd62_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:232
- C:\Users\Admin\AppData\Local\Temp\A4BC.tmp
  "C:\Users\Admin\AppData\Local\Temp\A4BC.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-02-18_1dd46333ed922a791919ac44f27dfd62_mafia.exe 4847C40EC0AD6A1898438BAC2C4CD948374F7616166E79DF0A4F8396D4D6E1244E721193E6B9455142139078F557FC1D7DBDDBEE7498B4CBA963EA2A0BF40875
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:1656

C:\Users\Admin\AppData\Local\Temp\A4BC.tmp

Filesize
384KB

MD5
ee80dfcdbbe34c0c733d97aa296e6341

SHA1
b7e01a3a6841cf9dfa34267f59c9a65201f06220

SHA256
08a2045cf3b6cbb2f7141f6f906bc8563830595da71b856924891ded25818203

SHA512
4b919cb7264a3fb031b90506102d7380ed36660c737e636b643e16b1e4ac6030505f0ba3f1aca703f0a14181e43a54132048ac11c6a59a3a77241ddaf4265114

Download Submit