81ec80d355fbfc96ae8a7fddfc2acb9276579779253d3caad0a76852600532f5

Analysis

max time kernel
147s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
24/02/2024, 08:33

Target

2024-02-24_7d8da46315e59e3ea1103a7b65513ee9_mafia.exe
Size

411KB
MD5

7d8da46315e59e3ea1103a7b65513ee9
SHA1

ea891d62df1dcb1c1c096b150f5ee34c9c998e61
SHA256

81ec80d355fbfc96ae8a7fddfc2acb9276579779253d3caad0a76852600532f5
SHA512

2b9017552e996628902ac32ac32f81c289d7c6e26c9c4ed8e0c7f0daa96f4d0f0c4a7ff0c9e7693d92956e46791efcdb1355609b31c26585c7c20bb145eab531
SSDEEP

6144:gVdvczEb7GUOpYWhNVynE/mFKQpkqfhhVKScwrZ8VmJfQS9MwqHI:gZLolhNVyEXyki8uz9fqHI

Score

7^/10

Deletes itself 1 IoCs

pid	Process
1960	5E2D.tmp

Executes dropped EXE 1 IoCs

pid	Process
1960	5E2D.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2184 wrote to memory of 1960	2184	2024-02-24_7d8da46315e59e3ea1103a7b65513ee9_mafia.exe	85
PID 2184 wrote to memory of 1960	2184	2024-02-24_7d8da46315e59e3ea1103a7b65513ee9_mafia.exe	85
PID 2184 wrote to memory of 1960	2184	2024-02-24_7d8da46315e59e3ea1103a7b65513ee9_mafia.exe	85

C:\Users\Admin\AppData\Local\Temp\2024-02-24_7d8da46315e59e3ea1103a7b65513ee9_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-24_7d8da46315e59e3ea1103a7b65513ee9_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2184
- C:\Users\Admin\AppData\Local\Temp\5E2D.tmp
  "C:\Users\Admin\AppData\Local\Temp\5E2D.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-02-24_7d8da46315e59e3ea1103a7b65513ee9_mafia.exe DFAF80F1CBE360ADF62EAAD38E20687D19092E69A9CC4A27381D7D079C2225E72B3085E38711EF79D0B2553C20D23FBF902F8C6CF3942895417090E87C18011B
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:1960

C:\Users\Admin\AppData\Local\Temp\5E2D.tmp

Filesize
411KB

MD5
a7aeaf3f216307bd2ddf33a5513364af

SHA1
50e54e11ce0215fe93105513046b1430f22fbdf0

SHA256
84ee95db073628a269fe2ad48406057d49132d361202deda7b12285c5bc6d317

SHA512
a5b66a623dbaeba3433d88ffd1a14d7292e2739c1fdd9e8eab922c9edca363c8b0a1ed1009ce9e0ea4afe024a361a14b53be3dffc057463f424734c35d0189ed

Download Submit