2c383270020462f6d92fc7b031c8d212d4788fd8559f5524ed8fc27a7dccc009

Analysis

max time kernel
147s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
05/03/2024, 10:30

Target

2024-03-05_693024db36dcffe34d498f6aca800b21_mafia.exe
Size

479KB
MD5

693024db36dcffe34d498f6aca800b21
SHA1

96dbc2727e4e61e5b48c3464b9d09ec6fe56c2ea
SHA256

2c383270020462f6d92fc7b031c8d212d4788fd8559f5524ed8fc27a7dccc009
SHA512

9269c356f09246f0e1dfaabf022e686d9b4ffc1697549e0fffe2cf1f12279e4e6326ab14001d8c692c045f5ff9aac06ca01ad24a4b588b8fd822325859d38716
SSDEEP

12288:bO4rfItL8HAndXDiLidiuDtKs29QaBKiE575UO:bO4rQtGABiLidiuZkPUVUO

Score

7^/10

Deletes itself 1 IoCs

pid	Process
1988	6784.tmp

Executes dropped EXE 1 IoCs

pid	Process
1988	6784.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3180 wrote to memory of 1988	3180	2024-03-05_693024db36dcffe34d498f6aca800b21_mafia.exe	87
PID 3180 wrote to memory of 1988	3180	2024-03-05_693024db36dcffe34d498f6aca800b21_mafia.exe	87
PID 3180 wrote to memory of 1988	3180	2024-03-05_693024db36dcffe34d498f6aca800b21_mafia.exe	87

C:\Users\Admin\AppData\Local\Temp\2024-03-05_693024db36dcffe34d498f6aca800b21_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-05_693024db36dcffe34d498f6aca800b21_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3180
- C:\Users\Admin\AppData\Local\Temp\6784.tmp
  "C:\Users\Admin\AppData\Local\Temp\6784.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-05_693024db36dcffe34d498f6aca800b21_mafia.exe 703DC188E86C6C46E4847F4DFBEDB73B2F349E69F602AF66F15BEF4ECE0589ED70EE862A5A8774738191B17E0F7D125779A79BEF2B1259B61807089CB0EA5073
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:1988

C:\Users\Admin\AppData\Local\Temp\6784.tmp

Filesize
479KB

MD5
3aff8a1711b7042a4aeb67380e4db376

SHA1
ed4c4482b44b655379804874d56510245bfb66e2

SHA256
7291aa5d41a3a2ba55b1d81db0a25517fa0076dbfa38b3d6ce2f9b6e83a62080

SHA512
759a550b0a97fd708a3f05f857196037b270b90c799008d4f306b776e9043123455bc9ae760732a63e34de6357a4071a11f6d4c9384fc1f5fe16edf5aba57ba1

Download Submit