1055ab66dc46fe1b5ee51d5ce33918406b4573e13bdd83ed94206ff1364ea3d7

Analysis

max time kernel
145s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
22/02/2024, 20:40

Target

2024-02-22_b60e7d09ce4c7961256c8df7d493ed12_mafia.exe
Size

428KB
MD5

b60e7d09ce4c7961256c8df7d493ed12
SHA1

07d3bdd2ef10059105f4c91a868b132b5828657e
SHA256

1055ab66dc46fe1b5ee51d5ce33918406b4573e13bdd83ed94206ff1364ea3d7
SHA512

59c97e3d6297fd4a435fa3a770067cbdfd3b497d204fdbcc0ea98e2ff16c21585188df46ada4a155cf299b6113ec17c29cb18a92c7fc0e753fc654fa1a39b1c9
SSDEEP

12288:Z594+AcL4tBekiuKzErPQLTozVWozj7tD8JkWJyWnbl:BL4tBekiuVrPQToz4ozvt2Jyqb

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3412	A662.tmp

Executes dropped EXE 1 IoCs

pid	Process
3412	A662.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2228 wrote to memory of 3412	2228	2024-02-22_b60e7d09ce4c7961256c8df7d493ed12_mafia.exe	87
PID 2228 wrote to memory of 3412	2228	2024-02-22_b60e7d09ce4c7961256c8df7d493ed12_mafia.exe	87
PID 2228 wrote to memory of 3412	2228	2024-02-22_b60e7d09ce4c7961256c8df7d493ed12_mafia.exe	87

C:\Users\Admin\AppData\Local\Temp\2024-02-22_b60e7d09ce4c7961256c8df7d493ed12_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-22_b60e7d09ce4c7961256c8df7d493ed12_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2228
- C:\Users\Admin\AppData\Local\Temp\A662.tmp
  "C:\Users\Admin\AppData\Local\Temp\A662.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-22_b60e7d09ce4c7961256c8df7d493ed12_mafia.exe 39D84F67A25760963187CFC421CBF5DD9119F3A6605251B9BA091E5335A61F03E078B621C6904CBD9FFACA6B6230B0CA1A974460CA1D9819B5F6D621864F3E6D
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3412

C:\Users\Admin\AppData\Local\Temp\A662.tmp

Filesize
428KB

MD5
52b91991f11173c3656ef93118663b08

SHA1
25a64244ebc23e7a191c3c492de610beeb0c7904

SHA256
b4ce875ada97e3703c56dba57539f1ae3e0e0ad912da99c8a697611d6721eccb

SHA512
888c329c6012cc6d6b16e2bb9922bdc0fc3e43ad3733401eb415688b9dd39769cabc6f9c3bd09874bd157cf787654bed7f5a4d9be5e5f553a5bdeb08f8ea3ee9

Download Submit