e3e52f7a98e81531bfc379e35f32173f397d91de8419146407f327f636f970c9

Analysis

max time kernel
93s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
25/02/2024, 15:47

Target

2024-02-25_b6cefb3fc1e2787e12f22ea644c1f5ba_mafia.exe
Size

411KB
MD5

b6cefb3fc1e2787e12f22ea644c1f5ba
SHA1

c386e8a6a4e3eca5550ad3d3027f4bdbf4999dc8
SHA256

e3e52f7a98e81531bfc379e35f32173f397d91de8419146407f327f636f970c9
SHA512

8b6c314b31eb11ff3d521154d38dfe2219b5519d8eaa356117ba23f9278f0d13addbc6ed35b646d7b2e3eea5a5c56f29ec6023f3d41f5bb4fcefe7f8da507129
SSDEEP

12288:gZLolhNVyEFdOv8R88U9p6kzWznWpXGWAaqHI:gZqhOE/6GnzWpXGWL

Score

7^/10

Deletes itself 1 IoCs

pid	Process
1952	37C9.tmp

Executes dropped EXE 1 IoCs

pid	Process
1952	37C9.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3444 wrote to memory of 1952	3444	2024-02-25_b6cefb3fc1e2787e12f22ea644c1f5ba_mafia.exe	85
PID 3444 wrote to memory of 1952	3444	2024-02-25_b6cefb3fc1e2787e12f22ea644c1f5ba_mafia.exe	85
PID 3444 wrote to memory of 1952	3444	2024-02-25_b6cefb3fc1e2787e12f22ea644c1f5ba_mafia.exe	85

C:\Users\Admin\AppData\Local\Temp\2024-02-25_b6cefb3fc1e2787e12f22ea644c1f5ba_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-25_b6cefb3fc1e2787e12f22ea644c1f5ba_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3444
- C:\Users\Admin\AppData\Local\Temp\37C9.tmp
  "C:\Users\Admin\AppData\Local\Temp\37C9.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-02-25_b6cefb3fc1e2787e12f22ea644c1f5ba_mafia.exe A7220D5DE1E453C11788062C02E38D751CC4BC1BD573ED4D8CA71487F906958F862F62E0C2CD6917EB7795141530885EC2CDB5D55A412F1C11027A2511D89C24
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:1952

C:\Users\Admin\AppData\Local\Temp\37C9.tmp

Filesize
411KB

MD5
c6b542d53c4ed7b100f2551479542aa7

SHA1
43e5496c2182a0a00449c3c92b0d58c00c5cb92a

SHA256
4a939d20fc04ea6b63486a394c04cc0bb6c139825b9de77cae70f1f38e01fe97

SHA512
f8fca5c1cb3ce267ba344f1b04a9415aef91c65ede4dad1b0f72e4cf6161f135a998aeb5be15a1d51506bbb568f96567704c16b5801bd2d814eae01de2b73b01

Download Submit