336d42b2bf544b35fa610d77611b91f26c3542a139aae3a6f84d7d6a6cff493f

Analysis

max time kernel
147s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
28/02/2024, 04:32

Target

2024-02-28_1ff436aa66a1b2d9279dca8bc3a1398e_mafia.exe
Size

435KB
MD5

1ff436aa66a1b2d9279dca8bc3a1398e
SHA1

82a8378985227706238488507c3d977fff3fef3c
SHA256

336d42b2bf544b35fa610d77611b91f26c3542a139aae3a6f84d7d6a6cff493f
SHA512

a2591c8f2831aa502bf32bf473d05f3131247235d0d065cd83d6021c23b9765e8a2b7c47e016255ac92d5aa016a58971e59a1604a052409d720fc416314c84a3
SSDEEP

6144:fJvyW4ojUnQjx4qePix+qXQjBY+tkH3OBNe5Y7IxuJ22GQZ5+7NlwVJp3Lbc0fQQ:fd4x+ePixnXQjNkeBICPQuZ57BjfQwP

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4936	44D9.tmp

Executes dropped EXE 1 IoCs

pid	Process
4936	44D9.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2820 wrote to memory of 4936	2820	2024-02-28_1ff436aa66a1b2d9279dca8bc3a1398e_mafia.exe	89
PID 2820 wrote to memory of 4936	2820	2024-02-28_1ff436aa66a1b2d9279dca8bc3a1398e_mafia.exe	89
PID 2820 wrote to memory of 4936	2820	2024-02-28_1ff436aa66a1b2d9279dca8bc3a1398e_mafia.exe	89

C:\Users\Admin\AppData\Local\Temp\2024-02-28_1ff436aa66a1b2d9279dca8bc3a1398e_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-28_1ff436aa66a1b2d9279dca8bc3a1398e_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2820
- C:\Users\Admin\AppData\Local\Temp\44D9.tmp
  "C:\Users\Admin\AppData\Local\Temp\44D9.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-02-28_1ff436aa66a1b2d9279dca8bc3a1398e_mafia.exe 45CD0995D48077E78AE612128D6307117737CF985B219C8D5048B6D9412856449E8E7CF5532EBAF53A65C73EFC0D98783A52D3DA2320899377CCED61A059E70C
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4936

C:\Users\Admin\AppData\Local\Temp\44D9.tmp

Filesize
435KB

MD5
a1601db4241e8190da1829496019a095

SHA1
b7f5b18a841f9025b90dda9cde282092c93336af

SHA256
e670e247e48f95b821d09fa4154cf03848c367274abf03322f6a8d4e18d9a3fe

SHA512
73c737b54462e81e26c55b519332b5cc34c880eabc1636679965074632fde31635437af7b52fcfeaf2f3fe944192c2fe4afeb909dbbff8b694f7b6e7d328676e

Download Submit