3901d0c46d511ff5ae4ed2163ae703b632ad188d550c2e5e97106702f293950f

Analysis

max time kernel
141s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
19/02/2024, 09:26

Target
2024-02-19_3212fc922c97dcd43b3e8393bf4d3474_mafia.exe
Size 473KB
Sample240219-lemxqaca59
SHA256 3901d0c46d511ff5ae4ed2163ae703b632ad188d550c2e5e97106702f293950f
MD5 3212fc922c97dcd43b3e8393bf4d3474
SHA1 48b38edb480baef8dbb5244213936379463440a3
SHA512 bb133e80b902f5b08cde59d6655b5d668c0dc0bed5c7fa317fb715ff5d14d3187ee7235d1401e5b4c366353a1b1c1e894b6b92906578656181dcc97e08211b20
SSDEEP 6144:fFrJxvldL4c5ONK1xgWbd1s79+iSt3N0CMjktVGba7FadFrmyuH8iDg2+omBOs88:Nb4bZudi79LmN0UYbapEFrm7EIs8tA0a
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2796	6F35.tmp

Executes dropped EXE 1 IoCs

pid	Process
2796	6F35.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2244 wrote to memory of 2796	2244	2024-02-19_3212fc922c97dcd43b3e8393bf4d3474_mafia.exe	84
PID 2244 wrote to memory of 2796	2244	2024-02-19_3212fc922c97dcd43b3e8393bf4d3474_mafia.exe	84
PID 2244 wrote to memory of 2796	2244	2024-02-19_3212fc922c97dcd43b3e8393bf4d3474_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-02-19_3212fc922c97dcd43b3e8393bf4d3474_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-19_3212fc922c97dcd43b3e8393bf4d3474_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2244
- C:\Users\Admin\AppData\Local\Temp\6F35.tmp
  "C:\Users\Admin\AppData\Local\Temp\6F35.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-19_3212fc922c97dcd43b3e8393bf4d3474_mafia.exe 8CA06D1F92C883C1787E0EBB4A99A5CC52F55AC2810F91D5C5FFAE3FC320B3C9B829B4192DF22F0DB24AD7B8CFCA1B53C0B978293859E1A5FB06CFD72A74E54A
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2796

6F35.tmp

Path C:\Users\Admin\AppData\Local\Temp\6F35.tmp
Size 473KB
SHA256 3a23eceec50425cccb6e256713b3fb3222049399d048e8df94bc9cd5b50dcd5f
MD5 81f2ab5c6c5e80a5281adba2c4660312
SHA1 11a0df1b07985e7fb1c2aefb92d29568b2d74363
SHA512 b110b98c026e83461a2d2db6eb198158ff422dd1bf2205e5bde05497b1a84dd7b6b5e9371b76638bad3d73d4c9537427e1737372196a357d4bec93337a24cf17
SSDEEP 6144:fFrJxvldL4c5ONK1xgWbd1s79+iStuJW6i9gjYwbSLKoI6bCla3PcJFyxgO9xlTM:Nb4bZudi79Lx9Iy3kQla3PmO9XoiA0a
MD5 SHA1 SHA512 SSDEEP

Submit Download