9ea7c1cbca67fd127786d37168fac2babc097a559cde9185e2cae1b6c7d7417d

Analysis

max time kernel
142s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
23/02/2024, 05:04

Target
2024-02-23_da0fc92750dd64b888876dff6c5bca74_mafia.exe
Size 411KB
Sample240223-fp8z2sbe2x
SHA256 9ea7c1cbca67fd127786d37168fac2babc097a559cde9185e2cae1b6c7d7417d
MD5 da0fc92750dd64b888876dff6c5bca74
SHA1 a0e420aec10c6e50499ed2903b8f4c705408d83f
SHA512 02eecd1fd6304e9b3ee5aa3a29101065627938bdb33195e605ebda811bcd2050624bf115fef3fbc160d680f608b5ceebce2a831bc15429fa9db65f3cf5a2be2f
SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFUqVdJE2WnFEaMyqv6+XxbKyP923XpwmLqHI:gZLolhNVyEzwJE5j9q5xH2pvLqHI
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3840	EB3B.tmp

Executes dropped EXE 1 IoCs

pid	Process
3840	EB3B.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 100 wrote to memory of 3840	100	2024-02-23_da0fc92750dd64b888876dff6c5bca74_mafia.exe	86
PID 100 wrote to memory of 3840	100	2024-02-23_da0fc92750dd64b888876dff6c5bca74_mafia.exe	86
PID 100 wrote to memory of 3840	100	2024-02-23_da0fc92750dd64b888876dff6c5bca74_mafia.exe	86

C:\Users\Admin\AppData\Local\Temp\2024-02-23_da0fc92750dd64b888876dff6c5bca74_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-23_da0fc92750dd64b888876dff6c5bca74_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:100
- C:\Users\Admin\AppData\Local\Temp\EB3B.tmp
  "C:\Users\Admin\AppData\Local\Temp\EB3B.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-02-23_da0fc92750dd64b888876dff6c5bca74_mafia.exe 8D7353911D4BB8F5DED292041A73E6AE7CCD1D6E0841E28F363DE7A79B8E59A7859E9E018C8227B62B89C0FB7FF02468B884D4BC640339A5F39B2553F466FC32
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3840

EB3B.tmp

Path C:\Users\Admin\AppData\Local\Temp\EB3B.tmp
Size 411KB
SHA256 01ac0ba68fb63455207b4783ff538dadb4709157a32d1a16d1a9a49237afaeba
MD5 634cd49a88b467fe3215506846dfbb24
SHA1 ba9e1713bd7ea3228667f75071cfaf03626003a6
SHA512 02eec5223b114d91bb83a651dc8f043ace0f67b1915bc29d2a91abdd0a1bddfa86bc561a5b6699581873ce9254de18ae839bb62b0ecb6e87f83ab53a2ea63bf6
SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFw2o/0n5mSUYnVx/4f74cz/cra4qHI:gZLolhNVyE+oMn5jF/qHI
MD5 SHA1 SHA512 SSDEEP

Submit Download