89427622299df212bddbb15d6d0b2a5bd1990a6c868558b0f0ad5a7a89fec872

Analysis

max time kernel
147s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
22/02/2024, 10:37

Target

2024-02-22_7d4c03da71bc973bb600fa3cc2fd01ad_mafia.exe
Size

473KB
MD5

7d4c03da71bc973bb600fa3cc2fd01ad
SHA1

9f9de8455f06063491fcb6694753aa6400de3372
SHA256

89427622299df212bddbb15d6d0b2a5bd1990a6c868558b0f0ad5a7a89fec872
SHA512

5c1c54308227a5145d1ed4b5f6c24cec2c1afbb0f8c7c760144bfa49656fbb405d9d903e9512920f8da09a181d0e22ae1c27d4b1ab2b500bacac429a328cefca
SSDEEP

12288:Nb4bZudi79Lr50rO4KjqIVMRDJmGmjA0a:Nb4bcdkLqrO4KjqIuRwGh

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4792	61C7.tmp

Executes dropped EXE 1 IoCs

pid	Process
4792	61C7.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1132 wrote to memory of 4792	1132	2024-02-22_7d4c03da71bc973bb600fa3cc2fd01ad_mafia.exe	84
PID 1132 wrote to memory of 4792	1132	2024-02-22_7d4c03da71bc973bb600fa3cc2fd01ad_mafia.exe	84
PID 1132 wrote to memory of 4792	1132	2024-02-22_7d4c03da71bc973bb600fa3cc2fd01ad_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-02-22_7d4c03da71bc973bb600fa3cc2fd01ad_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-22_7d4c03da71bc973bb600fa3cc2fd01ad_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1132
- C:\Users\Admin\AppData\Local\Temp\61C7.tmp
  "C:\Users\Admin\AppData\Local\Temp\61C7.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-22_7d4c03da71bc973bb600fa3cc2fd01ad_mafia.exe 4F520892B266713E7929D5E41BBB92955DE41A429C670F8B17C5CFC913BC34F8024372919B3DB4547AAA6E2291350A519AA2ED0B965D80C67A8E855B94DFAFD4
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4792

C:\Users\Admin\AppData\Local\Temp\61C7.tmp

Filesize
473KB

MD5
64558fd93f6960356c63398be2d5baf3

SHA1
00d530b7476730810540125f2fd8631714e3fe4f

SHA256
63944f6e9e5b89c5281652a713e21fdfa452fe390be2f1071525a873b34ff3f1

SHA512
0ce9a2521e7f1c64bea34ff407ffb8fefce0b27b68ef45c789bc44990e1a0640957cc4cdd3c56394b1f06b1f0a8a47ca06e5ddf595cd047db21addf546926737

Download Submit