cf4f73de56118e5d761a56ccef3246d07e95469c1435658cec5f9313520cae6d

Analysis

max time kernel
94s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
18/02/2024, 18:32

Target

2024-02-18_44dced8aa6d9135150fc1f75c8effe0a_mafia.exe
Size

411KB
MD5

44dced8aa6d9135150fc1f75c8effe0a
SHA1

0f9c0e5aeaf449d01993fc2449c2a85c67ff9a7d
SHA256

cf4f73de56118e5d761a56ccef3246d07e95469c1435658cec5f9313520cae6d
SHA512

0c2bc556dcf6effdb21d5e74196da1210f7a867778b687367d47edea08136af7b75ce41e513af4ad7768caf7e50f86b7bf19ad50058dc630c2c38785d009c1e4
SSDEEP

6144:gVdvczEb7GUOpYWhNVynE/mF/CHr6QcSX23yX6Eey+maJFqHI:gZLolhNVyEUCHJc930QwMqHI

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2112	3C0F.tmp

Executes dropped EXE 1 IoCs

pid	Process
2112	3C0F.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3592 wrote to memory of 2112	3592	2024-02-18_44dced8aa6d9135150fc1f75c8effe0a_mafia.exe	84
PID 3592 wrote to memory of 2112	3592	2024-02-18_44dced8aa6d9135150fc1f75c8effe0a_mafia.exe	84
PID 3592 wrote to memory of 2112	3592	2024-02-18_44dced8aa6d9135150fc1f75c8effe0a_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-02-18_44dced8aa6d9135150fc1f75c8effe0a_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-18_44dced8aa6d9135150fc1f75c8effe0a_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3592
- C:\Users\Admin\AppData\Local\Temp\3C0F.tmp
  "C:\Users\Admin\AppData\Local\Temp\3C0F.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-02-18_44dced8aa6d9135150fc1f75c8effe0a_mafia.exe 6F166DF7879A99AC74858A40797FFE7C51E475C08FE25D6A620D89383E2254101FF1F64B0B36A7F08C4DAF3CC6A0F66322BCBD4E9A0526E97AF3E871485C5A38
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2112

C:\Users\Admin\AppData\Local\Temp\3C0F.tmp

Filesize
411KB

MD5
033e2163ddd3e239eaeeb68a470e23a2

SHA1
5c0a1f9a746c6501321f2b6fa2658096242b47e5

SHA256
aefde4d6ea260b1eb8905bfd320ab109b4a453bd06a594887bf5f54016c96388

SHA512
db25a6321c148fd11a6a1f2ffeacfe2a51c5dc511bbec45b45ee5a6c797e8b67bec2583c83b67b84ee1293da659aa191d508ab6ce68474d88205e182e2bc21fb

Download Submit