8e7117c7626fcae10c2ef29c8a53ee5092ea212dbd82eaeb3226b282555ece27

Analysis

max time kernel
144s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
29/02/2024, 00:49

Target

2024-02-29_ad4b5d79573f212c9eaa074230b46da9_mafia.exe
Size

384KB
MD5

ad4b5d79573f212c9eaa074230b46da9
SHA1

42e70154c8c07d16f0d0ea1c68d822c231ad20e6
SHA256

8e7117c7626fcae10c2ef29c8a53ee5092ea212dbd82eaeb3226b282555ece27
SHA512

75b64bb0ce04651e63e740cadbe80cb3e4f5966852a0c0196f9abe080d6a748ae033ebea76120818990e156346649137406b17be40b463de0f05896762c993f7
SSDEEP

6144:drxfv4co9ZL3GBGgjODxbf7hHJDJdfXKZObGeZUqNPgIuJG0HPSL5mO2iUBCos0d:Zm48gODxbzrJRIOJUKgXDw6WwZ

Score

7^/10

Deletes itself 1 IoCs

pid	Process
540	BB22.tmp

Executes dropped EXE 1 IoCs

pid	Process
540	BB22.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5012 wrote to memory of 540	5012	2024-02-29_ad4b5d79573f212c9eaa074230b46da9_mafia.exe	89
PID 5012 wrote to memory of 540	5012	2024-02-29_ad4b5d79573f212c9eaa074230b46da9_mafia.exe	89
PID 5012 wrote to memory of 540	5012	2024-02-29_ad4b5d79573f212c9eaa074230b46da9_mafia.exe	89

C:\Users\Admin\AppData\Local\Temp\2024-02-29_ad4b5d79573f212c9eaa074230b46da9_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-29_ad4b5d79573f212c9eaa074230b46da9_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5012
- C:\Users\Admin\AppData\Local\Temp\BB22.tmp
  "C:\Users\Admin\AppData\Local\Temp\BB22.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-02-29_ad4b5d79573f212c9eaa074230b46da9_mafia.exe F6DF25F6C80EA354026A6C9798F385CDF3DE1E22CACDA5007AA34431B0E093CA2D6C205D22A3AF6C70E790EEAE58ABB9600097DC27C9B906A606241B8EC8DA35
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:540

C:\Users\Admin\AppData\Local\Temp\BB22.tmp

Filesize
384KB

MD5
f03c015f3ff17dffc0aa7fdf3571893f

SHA1
e1870f98170bb9ca3fe84be00a4ae63391c598cf

SHA256
c7a49bec813d338c1fc5617e8d55af713e3ce3c41405aeba87c635da6991ce39

SHA512
50624fae838b815610f9a85335126f1467efcb3ae8c71729bc0f3df279970fd44bafe67b12dc92b7caca9d24a623778f9f9ed7c6004a39c2ac83f5eb9c6e5b36

Download Submit