2d55e700ac2835ae897065bf7a96202ed33116538a5cb2fa8f63e31c0c325ce5

Analysis

max time kernel
93s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
21-02-2024 16:59

Target

2024-02-21_b3b672756ccf231ee7f33e73ca83a0d3_mafia.exe
Size

443KB
MD5

b3b672756ccf231ee7f33e73ca83a0d3
SHA1

bf8dccf66047ce3c4cddeeb9a96c16f8df8c2ece
SHA256

2d55e700ac2835ae897065bf7a96202ed33116538a5cb2fa8f63e31c0c325ce5
SHA512

7f189f73cf65cc35a6fecfcc49e7c005a56fa8476300747d4b65567d1cb5c333a563f936cf113277424dc32c8c20b7e5b5c61a8d0e31f84eb5eaa50c92ca76b5
SSDEEP

12288:Wq4w/ekieZgU6+PgCOb+krYzSWDjelgf2PTV/VMJlMa:Wq4w/ekieH6+PgCepla2PTV/GP

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4468	4083.tmp

Executes dropped EXE 1 IoCs

pid	Process
4468	4083.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1112 wrote to memory of 4468	1112	2024-02-21_b3b672756ccf231ee7f33e73ca83a0d3_mafia.exe	84
PID 1112 wrote to memory of 4468	1112	2024-02-21_b3b672756ccf231ee7f33e73ca83a0d3_mafia.exe	84
PID 1112 wrote to memory of 4468	1112	2024-02-21_b3b672756ccf231ee7f33e73ca83a0d3_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-02-21_b3b672756ccf231ee7f33e73ca83a0d3_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-21_b3b672756ccf231ee7f33e73ca83a0d3_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1112
- C:\Users\Admin\AppData\Local\Temp\4083.tmp
  "C:\Users\Admin\AppData\Local\Temp\4083.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-21_b3b672756ccf231ee7f33e73ca83a0d3_mafia.exe 5E1801E32C12F2ECA9DB064DFAC247BEFA85F075ABD30E0CC4EBE8988BADBA09EF936458960C93B7E1E1CEFE513AEF1DE394D7E52AAAB6526F8ADC7E3597206A
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4468

C:\Users\Admin\AppData\Local\Temp\4083.tmp

Filesize
443KB

MD5
76aff528d3b64d6b04e2cf4fb9022006

SHA1
9811ec141e185fa787e91fbf5b232dda93b1f53f

SHA256
0b6c640ceb0c2766e7b49610434b65a1469ddc026261bcbde82b63b2ca14a033

SHA512
f081eb9b83d0ad005586b1d74c67af53deb423d1d70f0c759d63880a51f21472e4ff1183362f774b27a471535e5007f85f97bedcb27c0d2526493bd7b8de7e80

Download Submit