1a431a02350a7c90e9c09b324b29fcb817894724338ab684183a63efb6e3bf43

Analysis

max time kernel
142s
max time network
165s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
25/02/2024, 12:42

Target

2024-02-25_7dbe5dac853e6c9919c24b86a27a0ef6_mafia.exe
Size

435KB
MD5

7dbe5dac853e6c9919c24b86a27a0ef6
SHA1

493e3a2a1c74bd63175ce1b08d6e64f7d1e9e572
SHA256

1a431a02350a7c90e9c09b324b29fcb817894724338ab684183a63efb6e3bf43
SHA512

ebeb2dec41c1f482357af87ecb3f579125e3c587a9b93cb1a30c3917237853d744d2fc122f82e523135444d328f09e464a25a29a3664252f8d0f01d8c599e2fd
SSDEEP

6144:98Xyq4o4aRCTuuqepiq+zQ1mBYQYrQOkP44GSyQazi55XPyQ0+Pf4NK9LrFyFiJK:9W4ufepiqKQ1mevk2SPQM5FZpLrFykJ

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4872	C8FD.tmp

Executes dropped EXE 1 IoCs

pid	Process
4872	C8FD.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2520 wrote to memory of 4872	2520	2024-02-25_7dbe5dac853e6c9919c24b86a27a0ef6_mafia.exe	85
PID 2520 wrote to memory of 4872	2520	2024-02-25_7dbe5dac853e6c9919c24b86a27a0ef6_mafia.exe	85
PID 2520 wrote to memory of 4872	2520	2024-02-25_7dbe5dac853e6c9919c24b86a27a0ef6_mafia.exe	85

C:\Users\Admin\AppData\Local\Temp\2024-02-25_7dbe5dac853e6c9919c24b86a27a0ef6_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-25_7dbe5dac853e6c9919c24b86a27a0ef6_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2520
- C:\Users\Admin\AppData\Local\Temp\C8FD.tmp
  "C:\Users\Admin\AppData\Local\Temp\C8FD.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-25_7dbe5dac853e6c9919c24b86a27a0ef6_mafia.exe 537B66C3D19C3498DF6B0C51CB9C3FBD6CD675CA68DFFA8110E8B75224D16EBFA8B06EC1F47AB4E37D78DF53693BC54E1C8E3BE4E8F61B33118FCBC2C1A3D8A0
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4872

C:\Users\Admin\AppData\Local\Temp\C8FD.tmp

Filesize
435KB

MD5
28a84d3bc3aa513c96df0b910323ba22

SHA1
e50a1e0367e0cefbcaef781da5b1aabafd1fdceb

SHA256
1c643d870048ea2779d33544989410ca802097a5593a2b2fb7ea2d4086cf5417

SHA512
10bc2ac8616e2cf0174316b1ee3a961ee6a24b70f1d62ce37565d5aafc1a24ce15be907312d2efe23985fa099223c4dd74c32c5f760d0a1f42ec8d9d04db1075

Download Submit