5f16119e9d89dd4d5441c2eeda3b547ab16007ac4f6fcbfa3a771ba3475f8e05

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
25/02/2024, 12:55

Target

2024-02-25_cb12c7512323db488e2e67e6428887b4_mafia.exe
Size

443KB
MD5

cb12c7512323db488e2e67e6428887b4
SHA1

f8085aacc06573e2f860092b14d27f733c8dd0f1
SHA256

5f16119e9d89dd4d5441c2eeda3b547ab16007ac4f6fcbfa3a771ba3475f8e05
SHA512

7fdca3c64d8c97deb2c7273f08fe7b0a0e2d53229c5bb08def34ab24cef4d8bc18e59757bb76940473913fc85eb488ab069fc22a7846b4b46f2bf9a984411d85
SSDEEP

6144:Wucyz4obQmKkWb6ekie+ogU6BYYwI/lv9DvkjdDdo79SfJI8Fd6cQA4QlMa:Wq4w/ekieZgU6TPkpdo79tGdAtQlMa

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3908	3671.tmp

Executes dropped EXE 1 IoCs

pid	Process
3908	3671.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1880 wrote to memory of 3908	1880	2024-02-25_cb12c7512323db488e2e67e6428887b4_mafia.exe	90
PID 1880 wrote to memory of 3908	1880	2024-02-25_cb12c7512323db488e2e67e6428887b4_mafia.exe	90
PID 1880 wrote to memory of 3908	1880	2024-02-25_cb12c7512323db488e2e67e6428887b4_mafia.exe	90

C:\Users\Admin\AppData\Local\Temp\2024-02-25_cb12c7512323db488e2e67e6428887b4_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-25_cb12c7512323db488e2e67e6428887b4_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1880
- C:\Users\Admin\AppData\Local\Temp\3671.tmp
  "C:\Users\Admin\AppData\Local\Temp\3671.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-25_cb12c7512323db488e2e67e6428887b4_mafia.exe 98EF7BCE15F6905BE80D3A5EC62EB0D1E2D36BE48A1C8BB5F5DDC0C479534E8CD31A2E6B533C7691788A2873434CDF3F3776F55E262809B6348420053A8FE8C0
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3908

C:\Users\Admin\AppData\Local\Temp\3671.tmp

Filesize
443KB

MD5
5e67c09c33758a89971ac449d6b769eb

SHA1
d7a7ad172ebf2915200bb40b72fb277d945d21f0

SHA256
41ee486f7565a0f6ee0eba75443d0dcc3618b6498e91720ff2020680bb00315f

SHA512
89e3131f96890639934f7415cf49140ad82c713667366aaa789b74affd5df7affc1252539c1a110efa175b239e92a1ff3adb4b8e0dafbca85845b9dad9e790cb

Download Submit