822c08a138d345f1d9f84f844a1683982a14afb39488a2b63d139ddf61d72d98

Analysis

max time kernel
93s
max time network
115s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
22/02/2024, 17:41

Target

2024-02-22_711bbad60222b9bd3d26ae7dc8a94568_mafia.exe
Size

468KB
MD5

711bbad60222b9bd3d26ae7dc8a94568
SHA1

7dbe01bfa4487fee541849767456898c99a3b0ef
SHA256

822c08a138d345f1d9f84f844a1683982a14afb39488a2b63d139ddf61d72d98
SHA512

f53ddf9f03fc221b77e47b4e9c4828855f523b07630622774fac6f89426fcb9063ffbdae2cbddbaa62c990de58e2fb0a7f1fb55a3694831303620a97a6eb61c5
SSDEEP

12288:qO4rfItL8HGT0+7Y5Gx1diyd+zbLadqRXM7bWmeEVGL:qO4rQtGGT0IYIx1ddvdqRXMumeEVGL

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3760	3CEA.tmp

Executes dropped EXE 1 IoCs

pid	Process
3760	3CEA.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4972 wrote to memory of 3760	4972	2024-02-22_711bbad60222b9bd3d26ae7dc8a94568_mafia.exe	90
PID 4972 wrote to memory of 3760	4972	2024-02-22_711bbad60222b9bd3d26ae7dc8a94568_mafia.exe	90
PID 4972 wrote to memory of 3760	4972	2024-02-22_711bbad60222b9bd3d26ae7dc8a94568_mafia.exe	90

C:\Users\Admin\AppData\Local\Temp\2024-02-22_711bbad60222b9bd3d26ae7dc8a94568_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-22_711bbad60222b9bd3d26ae7dc8a94568_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4972
- C:\Users\Admin\AppData\Local\Temp\3CEA.tmp
  "C:\Users\Admin\AppData\Local\Temp\3CEA.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-22_711bbad60222b9bd3d26ae7dc8a94568_mafia.exe E47C0DFF0C66136E8B3C69CEE403ABABBEA9251E0F10B088F54F9E23054E5712B44635E36BE35F41C0F9ACF6DD1565C45489B9B9413E0EF115935B202DC85DAC
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3760

C:\Users\Admin\AppData\Local\Temp\3CEA.tmp

Filesize
468KB

MD5
8fb76d01a83e2b94cf8f2a548daac98d

SHA1
d425fe3ce4d9b43bd6303b58f357f4070a12db71

SHA256
bd6459e513e7670d9aba63c97b69d3dc4aa046a7fd2ff1518b42b523b9b6d51b

SHA512
20324e556e02470ce229663e66a53e3623b4e41ea8b2626442c4fc7c1e6030e7b49355bd53708e48b3336bf912a8230d101220c2fe476870256b9111f2904446

Download Submit