b50781ebba57ea094dcfde836dc2aee53d5a4e38ad38cca373f9c4ccf06cebdf

Analysis

max time kernel
141s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
18-02-2024 18:28

Target

2024-02-18_23f39a0c2875710516759be4f22c7832_mafia.exe
Size

476KB
MD5

23f39a0c2875710516759be4f22c7832
SHA1

59938e6850a31e219d3e71e871838dd7cc338316
SHA256

b50781ebba57ea094dcfde836dc2aee53d5a4e38ad38cca373f9c4ccf06cebdf
SHA512

8966a58788ad074c2e0f11a6b436311371fb9ffcfe5d9294a29f05a00886445b74172a139900dde5443785262c49aa82cef9ff0ecaa5cca902eb94e3ec4d4486
SSDEEP

12288:aO4rfItL8HRPWi8lz8eCqUOyyRPtKPr3JZ3S7K9wlsDpVFd:aO4rQtGR4Z8eXy6tKPfS+9wlsDpVFd

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4268	A74C.tmp

Executes dropped EXE 1 IoCs

pid	Process
4268	A74C.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2092 wrote to memory of 4268	2092	2024-02-18_23f39a0c2875710516759be4f22c7832_mafia.exe	84
PID 2092 wrote to memory of 4268	2092	2024-02-18_23f39a0c2875710516759be4f22c7832_mafia.exe	84
PID 2092 wrote to memory of 4268	2092	2024-02-18_23f39a0c2875710516759be4f22c7832_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-02-18_23f39a0c2875710516759be4f22c7832_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-18_23f39a0c2875710516759be4f22c7832_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2092
- C:\Users\Admin\AppData\Local\Temp\A74C.tmp
  "C:\Users\Admin\AppData\Local\Temp\A74C.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-18_23f39a0c2875710516759be4f22c7832_mafia.exe E05857834587AC151FE3DA8770B203D73ABC301098C32A65C65F28FAF75D9ED4002C7AB2EB1DBC4BBF8487384299F1907AFE5F4ADE2D5050693B5DF7C82886AA
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4268

C:\Users\Admin\AppData\Local\Temp\A74C.tmp

Filesize
476KB

MD5
d72fbeb6be7f7943d7a2c209a242a982

SHA1
593ba113416ca487c8ef823509b56ec50e10857c

SHA256
1a9ad6659c2f318ec0c9d9d98e6c7a348419f31eb124ad4077e9d0ba70308b41

SHA512
92b0f787d0e9b4efdf49395405347ecaf04818dd5db3724dfcfcc8da2f7a813069a0c78e1bc20f4d5b404e39e2d719c0645b6e7df9f1ca7e49103d7af2b0db99

Download Submit