4cc513750438d6efc197e879e9aed3e0cadab8d87fac41e1f38eb6b49b89e2d0

Analysis

max time kernel
89s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
19-02-2024 23:32

Target

2024-02-19_6a6ab9878607af1bf1e28fa4b0fea0d8_mafia.exe
Size

384KB
MD5

6a6ab9878607af1bf1e28fa4b0fea0d8
SHA1

2a2d6685c14434d5f11d9c1aab922fb250eb3503
SHA256

4cc513750438d6efc197e879e9aed3e0cadab8d87fac41e1f38eb6b49b89e2d0
SHA512

2cfbf9c7481d3fcfb7e66b7cf133d63eaf168b1b97020acca1aadc2b6994e9fe425f100cca9964cf8378fa4454829dd59303ae52f430786b15de8757e5924098
SSDEEP

6144:drxfv4co9ZL3GBGgjODxbf7hHdh4qxmjAAfbyAE/k5ffrShVbZ:Zm48gODxbzpltAfz5LaVbZ

Score

7^/10

Deletes itself 1 IoCs

pid	Process
1188	4B03.tmp

Executes dropped EXE 1 IoCs

pid	Process
1188	4B03.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1796 wrote to memory of 1188	1796	2024-02-19_6a6ab9878607af1bf1e28fa4b0fea0d8_mafia.exe	87
PID 1796 wrote to memory of 1188	1796	2024-02-19_6a6ab9878607af1bf1e28fa4b0fea0d8_mafia.exe	87
PID 1796 wrote to memory of 1188	1796	2024-02-19_6a6ab9878607af1bf1e28fa4b0fea0d8_mafia.exe	87

C:\Users\Admin\AppData\Local\Temp\2024-02-19_6a6ab9878607af1bf1e28fa4b0fea0d8_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-19_6a6ab9878607af1bf1e28fa4b0fea0d8_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1796
- C:\Users\Admin\AppData\Local\Temp\4B03.tmp
  "C:\Users\Admin\AppData\Local\Temp\4B03.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-02-19_6a6ab9878607af1bf1e28fa4b0fea0d8_mafia.exe B5D382AC3279C7729319A623EA7F04CE85C6008A2D6DC702857F6BEC65535D9D50AFA6BE2AFE03534B8580E04EFC87856D2374C3ED4775A12A41AEE11E6CD491
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:1188

C:\Users\Admin\AppData\Local\Temp\4B03.tmp

Filesize
384KB

MD5
cdfad4c2a06431ead0aee92dfcbd543c

SHA1
ac37467f36d496f25cbb2dddcca46415cbd0bc91

SHA256
8a2da463e96b7ed773f792f723ff2370c660ae5f933cb9194c863f09a978310c

SHA512
3389c5fe6bd222c30f8a518eacbfc382d6dbc28268b27e17299c0bab77cd7c94c22398b4f952fd3ef246120534b8cbc7727c07e710ad3e38d2e2fe8e646cee29

Download Submit