403f6551424f3b464473e0893b927d531ad7d04225938c5a4813be9a62d594ef

Analysis

max time kernel
92s
max time network
113s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
28/02/2024, 01:43

Target

2024-02-28_0baf306dc83beb8b9860beb7d5ab9190_mafia.exe
Size

384KB
MD5

0baf306dc83beb8b9860beb7d5ab9190
SHA1

afc73f7148da72dca8d9dbff5eb856de830cfb4b
SHA256

403f6551424f3b464473e0893b927d531ad7d04225938c5a4813be9a62d594ef
SHA512

35466fffad0d13d235e6d81090868f6ce3aba6f766f41d976dd9c708d9bb28a8700536d7967dade403ecfd1891b49ebeeb5e05dd0d09215e71de735817b527fa
SSDEEP

6144:drxfv4co9ZL3GBGgjODxbf7hHc9ql4zHhUMl5F6HOTLyB1HCv7NAfCZ:Zm48gODxbzWkgBUqFkBFCv7NQCZ

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4000	39AD.tmp

Executes dropped EXE 1 IoCs

pid	Process
4000	39AD.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3764 wrote to memory of 4000	3764	2024-02-28_0baf306dc83beb8b9860beb7d5ab9190_mafia.exe	88
PID 3764 wrote to memory of 4000	3764	2024-02-28_0baf306dc83beb8b9860beb7d5ab9190_mafia.exe	88
PID 3764 wrote to memory of 4000	3764	2024-02-28_0baf306dc83beb8b9860beb7d5ab9190_mafia.exe	88

C:\Users\Admin\AppData\Local\Temp\2024-02-28_0baf306dc83beb8b9860beb7d5ab9190_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-28_0baf306dc83beb8b9860beb7d5ab9190_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3764
- C:\Users\Admin\AppData\Local\Temp\39AD.tmp
  "C:\Users\Admin\AppData\Local\Temp\39AD.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-02-28_0baf306dc83beb8b9860beb7d5ab9190_mafia.exe 216CBD4B3D30413C2275F13AE43443ACFCFD6024F833A314F4F70820D3455CF831D0D9788D9B6690E0DADB64AAF8E2463F7AD2460A7CA32AD21C991A4734F2C4
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4000

C:\Users\Admin\AppData\Local\Temp\39AD.tmp

Filesize
384KB

MD5
40e2144ea5e5cd492d5a65fac649a87c

SHA1
966c2d4141b8dbdb76424c081baa3eaed5f13ff3

SHA256
09eed2efaedd841acf0814acd816b378766bd6140e1d25cb990c47ee1d0a56bb

SHA512
88d0a5d2a9473408fda8a5aa45084f316c74c49dba95e5fb38712c1625270529a8b231af5811c19634fbabb61705316c8b61606afcc7b655c21e1cdb3fb7fd04

Download Submit