3bc348a2a06942c6af2a3ff99a77e14a4bd26a3a22da8bbc97c8320eed332404

Analysis

max time kernel
142s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
18/02/2024, 13:38

Target

2024-02-18_7db76b5bb2664b9e9e8beb66b19ef104_mafia.exe
Size

479KB
MD5

7db76b5bb2664b9e9e8beb66b19ef104
SHA1

c03a7be76dfc2badbb95a850238d59ee798c6a58
SHA256

3bc348a2a06942c6af2a3ff99a77e14a4bd26a3a22da8bbc97c8320eed332404
SHA512

6e04e54138330dd29ce2a9effb627b5416346062a68b9344e71157348f9588afb099bf36a938fd9fa56672f942ba19e8f86641020e162d1bd91ecfbfc5714b92
SSDEEP

12288:bO4rfItL8HAojOXiRgc/sjCnY2tpJRLiNYP75UO:bO4rQtGAoqXfcQCn5ruSVUO

Score

7^/10

Deletes itself 1 IoCs

pid	Process
1276	8D2C.tmp

Executes dropped EXE 1 IoCs

pid	Process
1276	8D2C.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3600 wrote to memory of 1276	3600	2024-02-18_7db76b5bb2664b9e9e8beb66b19ef104_mafia.exe	84
PID 3600 wrote to memory of 1276	3600	2024-02-18_7db76b5bb2664b9e9e8beb66b19ef104_mafia.exe	84
PID 3600 wrote to memory of 1276	3600	2024-02-18_7db76b5bb2664b9e9e8beb66b19ef104_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-02-18_7db76b5bb2664b9e9e8beb66b19ef104_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-18_7db76b5bb2664b9e9e8beb66b19ef104_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3600
- C:\Users\Admin\AppData\Local\Temp\8D2C.tmp
  "C:\Users\Admin\AppData\Local\Temp\8D2C.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-18_7db76b5bb2664b9e9e8beb66b19ef104_mafia.exe ADC85D98934111E3C1508BB53CC6135FB996D3B16AE60EFB6132A18534C45E418F58E8E4C2AB89A5639DE23FB222761E2B39C42D56AF47946E266A209AE738AE
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:1276

C:\Users\Admin\AppData\Local\Temp\8D2C.tmp

Filesize
479KB

MD5
8b79e98033f9d74c63525d1d591d7e5a

SHA1
b09543ea921f6dfb883a8ac7304d314c769c90a9

SHA256
8f8897eebad865268056c7a7978a6713c27d7cbadf929cacbc8864d194b5a5a7

SHA512
e8ea41b67bcc03c8e6f9d6b3590182b1fb6860620b1936660760491d4f630b4c5cb55285a929d81824c2d28a7d9790ff4a3b038cc95ef7a59606a0c58dab6d39

Download Submit