b4c68a47a9798793be967d4b02a431ca8b01b079f8066938bcc76582886f344b

Analysis

max time kernel
93s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
23/02/2024, 21:34

Target

2024-02-23_f25291c5c44f8faa49a88e221aa3b6e9_mafia.exe
Size

468KB
MD5

f25291c5c44f8faa49a88e221aa3b6e9
SHA1

68c0f47dd0a4397e713308d4c2699daa4386ee0b
SHA256

b4c68a47a9798793be967d4b02a431ca8b01b079f8066938bcc76582886f344b
SHA512

3884f17b3578aef56f4d1a00fee2c64b72fd28134a0270ff6994b0f2f056bbe361711e516456f944d3ba8e053dc23ae3c3fd901845be32cb988f45bafdac1718
SSDEEP

12288:qO4rfItL8HGlFDgv0Z36m5LV3Tef5tjXbpz8OomjjQ7bWmeEVGL:qO4rQtGGlFDgv45Cf5tjXN5oajQumeEk

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2716	3076.tmp

Executes dropped EXE 1 IoCs

pid	Process
2716	3076.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1604 wrote to memory of 2716	1604	2024-02-23_f25291c5c44f8faa49a88e221aa3b6e9_mafia.exe	86
PID 1604 wrote to memory of 2716	1604	2024-02-23_f25291c5c44f8faa49a88e221aa3b6e9_mafia.exe	86
PID 1604 wrote to memory of 2716	1604	2024-02-23_f25291c5c44f8faa49a88e221aa3b6e9_mafia.exe	86

C:\Users\Admin\AppData\Local\Temp\2024-02-23_f25291c5c44f8faa49a88e221aa3b6e9_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-23_f25291c5c44f8faa49a88e221aa3b6e9_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1604
- C:\Users\Admin\AppData\Local\Temp\3076.tmp
  "C:\Users\Admin\AppData\Local\Temp\3076.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-23_f25291c5c44f8faa49a88e221aa3b6e9_mafia.exe 503D9777CF623E7B3D50DB5324B6A868C49F215E422DA5A87C4C870D0929C784567BF0957AB09C3599A17FCD49E45AD5712F27928372892876FC66E578818ABA
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2716

C:\Users\Admin\AppData\Local\Temp\3076.tmp

Filesize
468KB

MD5
4aedc5b4770280a32cabb42e0d657c35

SHA1
db249c6626f66def632375fd38350f03396425ec

SHA256
e2c2245facc68f673691dc57ecc95c8dbfa03353607319e45ac4fc6d5ee10e82

SHA512
2b4ab06c9d3bfbaa2d3a032200d6d18be7d16e9116c294f36de76d24463aacecd983776224d5702a93db044f5d8259ef83a8074bcc6b375fbc84376236db658c

Download Submit