5f9998797642f7ed53d10075041afe1decaf944770934c03398735391fa83c7c

Analysis

max time kernel
94s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
24-02-2024 14:38

Target

2024-02-24_7b628176370fa8a98ce1ec3844145148_mafia.exe
Size

435KB
MD5

7b628176370fa8a98ce1ec3844145148
SHA1

84ff0bbff69b40f58b9d751a76f825481c9f90a1
SHA256

5f9998797642f7ed53d10075041afe1decaf944770934c03398735391fa83c7c
SHA512

c9339ac300ca97b1301583bf495a8740be69fda03d5443ecb73912ca427c80b035ac9a0cdc749c36add80aeab3b2278431fcdaef4aba59b73e236cf5babd40af
SSDEEP

12288:fd4x+ePixnXQjb4qNT344CDdrcnHkDkQtkwP:fd4x+ePixAjpNToLDdr+ElK

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4448	3642.tmp

Executes dropped EXE 1 IoCs

pid	Process
4448	3642.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2300 wrote to memory of 4448	2300	2024-02-24_7b628176370fa8a98ce1ec3844145148_mafia.exe	87
PID 2300 wrote to memory of 4448	2300	2024-02-24_7b628176370fa8a98ce1ec3844145148_mafia.exe	87
PID 2300 wrote to memory of 4448	2300	2024-02-24_7b628176370fa8a98ce1ec3844145148_mafia.exe	87

C:\Users\Admin\AppData\Local\Temp\2024-02-24_7b628176370fa8a98ce1ec3844145148_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-24_7b628176370fa8a98ce1ec3844145148_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2300
- C:\Users\Admin\AppData\Local\Temp\3642.tmp
  "C:\Users\Admin\AppData\Local\Temp\3642.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-24_7b628176370fa8a98ce1ec3844145148_mafia.exe 877DA26B25226EBF20BF6593E82770F9B6A4004A8A13F8EC0399FC233F00EA1BAABF94D809C0FC743D652DBFAD936F782683D789FBED968317717DECBDD58B66
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4448

C:\Users\Admin\AppData\Local\Temp\3642.tmp

Filesize
435KB

MD5
da48903472a00743c92915509e28e11a

SHA1
5f517a47505c83942ef6fae4c2da5d3d8c0a3bbc

SHA256
2e2d23d881be3bd4ea5d938a7e2efd5a32d6fee9c5cff2d1db193f77b34cd4af

SHA512
df583adc0aaf23dadae9f2acefbd8bca2baffd081e78b1610220df82ad67b7a3619b9a68f7f166584be2579eb1958fb708de068c76a75bcb12b59823fc56c2f0

Download Submit