a541ffd5961c08aaa3d22a6005a8b16374acbce1213f957c38d4768b775237a4

Analysis

max time kernel
96s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240220-en
resource tags

arch:x64arch:x86image:win10v2004-20240220-enlocale:en-usos:windows10-2004-x64system
submitted
20/02/2024, 14:54

Target

2024-02-20_aca33214f487683706002a871b9b16d9_mafia.exe
Size

476KB
MD5

aca33214f487683706002a871b9b16d9
SHA1

20a50db78c61d2b4f07982750da2d9184d6a382e
SHA256

a541ffd5961c08aaa3d22a6005a8b16374acbce1213f957c38d4768b775237a4
SHA512

88a0cb6305e5220face52cd558ca60c1957f34cc4c0ba489e68be59ed98d12a4267637b5a162a349424ec2d7e1fac704ebb91472d16ab57d7fdae26a24d1498b
SSDEEP

12288:aO4rfItL8HRoLOKmqMe3B2z7K9wlsDpVFd:aO4rQtGRx9esz+9wlsDpVFd

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2308	35A6.tmp

Executes dropped EXE 1 IoCs

pid	Process
2308	35A6.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 392 wrote to memory of 2308	392	2024-02-20_aca33214f487683706002a871b9b16d9_mafia.exe	85
PID 392 wrote to memory of 2308	392	2024-02-20_aca33214f487683706002a871b9b16d9_mafia.exe	85
PID 392 wrote to memory of 2308	392	2024-02-20_aca33214f487683706002a871b9b16d9_mafia.exe	85

C:\Users\Admin\AppData\Local\Temp\2024-02-20_aca33214f487683706002a871b9b16d9_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-20_aca33214f487683706002a871b9b16d9_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:392
- C:\Users\Admin\AppData\Local\Temp\35A6.tmp
  "C:\Users\Admin\AppData\Local\Temp\35A6.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-20_aca33214f487683706002a871b9b16d9_mafia.exe 98A8D5F30000E48506283D778CE3594FAF0894F50AA05BD2EBC382802545C938FE44E3832632D69514E165B39FDBB0B4AF1A9D289FCAB5F1DB8FD727DE6F0454
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2308

C:\Users\Admin\AppData\Local\Temp\35A6.tmp

Filesize
476KB

MD5
8d956bdc34160c892591c2da872a2f6b

SHA1
b8ac36ab31760600669ef57468469cf13b047600

SHA256
f2e86cfda940f5fe1b30faaf7448a48172aa864dd59837b92effd3034d4ab1bd

SHA512
5efea0c219612a5c2336575a403401723c774898d7f9f1374eed5fdc28d89189d0765d46602b6033cfa47d2c01ac6ff4e281c46b466a4e41972a686081ef1c23

Download Submit