21327ccd1ab9396656222b91200a6d596e762a2b3ece392541fc167866ca8195

Analysis

max time kernel
93s
max time network
113s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
22/02/2024, 17:48

Target

2024-02-22_bba2da5bb13a7bde0e3034c66789659b_mafia.exe
Size

412KB
MD5

bba2da5bb13a7bde0e3034c66789659b
SHA1

dd33b4b0f58a4c3bcbbc1ad1a13422d6e3e38ae7
SHA256

21327ccd1ab9396656222b91200a6d596e762a2b3ece392541fc167866ca8195
SHA512

741c8a203250a11e549e3e20436b3e2186d5aa6ed888de1395efa356c982f19a0255776b094fee7e6371e0c43cf1858ffa16e49e8268f2c017e7f6758a1d1ba0
SSDEEP

6144:UooTAQjKG3wDGAeIc9kphIoDZnZN7C8PXXP8X9foszboP9svxX+VaDON3P:U6PCrIc9kph5bN7ZPg9QsXOVwONf

Score

7^/10

Deletes itself 1 IoCs

pid	Process
5048	2D0B.tmp

Executes dropped EXE 1 IoCs

pid	Process
5048	2D0B.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1280 wrote to memory of 5048	1280	2024-02-22_bba2da5bb13a7bde0e3034c66789659b_mafia.exe	86
PID 1280 wrote to memory of 5048	1280	2024-02-22_bba2da5bb13a7bde0e3034c66789659b_mafia.exe	86
PID 1280 wrote to memory of 5048	1280	2024-02-22_bba2da5bb13a7bde0e3034c66789659b_mafia.exe	86

C:\Users\Admin\AppData\Local\Temp\2024-02-22_bba2da5bb13a7bde0e3034c66789659b_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-22_bba2da5bb13a7bde0e3034c66789659b_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1280
- C:\Users\Admin\AppData\Local\Temp\2D0B.tmp
  "C:\Users\Admin\AppData\Local\Temp\2D0B.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-02-22_bba2da5bb13a7bde0e3034c66789659b_mafia.exe E327324CC7910CD4520939E06BFF8480AC0DC95E212CE896B53161E9029FBF37141079797FC8537066A4A48D4386FCA1D18051009176FE7919C05DF76DB08331
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:5048

C:\Users\Admin\AppData\Local\Temp\2D0B.tmp

Filesize
412KB

MD5
27b93bec91daa5e20cd97f2845f4b725

SHA1
2f05d0a974990b724ec111dacbe7ddd13c78d0c0

SHA256
b346ef4218a8e79eb4554398c8522302ff816f8c3ad5b0407d69c8a4c1166c10

SHA512
01e52d1423128ca81cd1483391bdf205838b85ee0a3a25ce3ec674ce8760fd17386919b2da329ac088540bc387cf51510655f5e6d571a6bfb6cb44852a7fbab2

Download Submit