1e112d2627f5fdcaace78b4a249d61f580f8d6410bf262073c622614c1d75945

Analysis

max time kernel
143s
max time network
163s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
19/02/2024, 16:46

Target

2024-02-19_a720d4c5cbf3cc72ad1c58584d6e56b4_mafia.exe
Size

444KB
MD5

a720d4c5cbf3cc72ad1c58584d6e56b4
SHA1

976a205cad20fb6b58d06d0bbc43668086506151
SHA256

1e112d2627f5fdcaace78b4a249d61f580f8d6410bf262073c622614c1d75945
SHA512

e66aec1a87d5bdf107703f6f855ab54091ecf0f2e23b97edf1bb6a678992379fffa8dc90bb088ff714643fae7be6da9da229f171cbdbd690027118836b4086d4
SSDEEP

6144:fFrJxvldL4c5ONK1xgWbd1s79+iStUpoiL2JPe+xnvBznfBHukt/cSMzpnQvpQSt:Nb4bZudi79LVL2J5x5LMDvpgd35cA

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3144	6F83.tmp

Executes dropped EXE 1 IoCs

pid	Process
3144	6F83.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3416 wrote to memory of 3144	3416	2024-02-19_a720d4c5cbf3cc72ad1c58584d6e56b4_mafia.exe	84
PID 3416 wrote to memory of 3144	3416	2024-02-19_a720d4c5cbf3cc72ad1c58584d6e56b4_mafia.exe	84
PID 3416 wrote to memory of 3144	3416	2024-02-19_a720d4c5cbf3cc72ad1c58584d6e56b4_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-02-19_a720d4c5cbf3cc72ad1c58584d6e56b4_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-19_a720d4c5cbf3cc72ad1c58584d6e56b4_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3416
- C:\Users\Admin\AppData\Local\Temp\6F83.tmp
  "C:\Users\Admin\AppData\Local\Temp\6F83.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-19_a720d4c5cbf3cc72ad1c58584d6e56b4_mafia.exe F1954CB7A622B9ECBA59343816A93F2E1EC551F8EEF2121DC4EB073D0DE31D15519F2BB9D8E9FD4FF9400572BA0D58385381BF493D3972A162136D6B945A4679
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3144

C:\Users\Admin\AppData\Local\Temp\6F83.tmp

Filesize
444KB

MD5
ad8fd8963547d6f8637f2b8d41cd37a5

SHA1
b96a01a472c498be3fa152397bc44120be3a213c

SHA256
d5bc62e63a3baf144ef32ef9bfa156a2e5b6abe5ffb4fa7feb02d5f839ca8ad7

SHA512
97fa83e07f23e2bb4e69d55f908a2cb7ebcf6c74ffd17154ffc180a63db27b52c4507e41d7146a0fab291ed3aaa013ec38decba5265218398fd064100f5b8ca1

Download Submit