9715c17b08362b9f3a3662630c8e4b7f3162d372cc82f3576d0ed33a2508a906

Analysis

max time kernel
148s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
05/03/2024, 12:34

Target

2024-03-05_4c44e1ac8625cc14df82555e92668638_mafia.exe
Size

435KB
MD5

4c44e1ac8625cc14df82555e92668638
SHA1

618fe57b5ac4ecfcf08e1dad422e774a7bfb0f8a
SHA256

9715c17b08362b9f3a3662630c8e4b7f3162d372cc82f3576d0ed33a2508a906
SHA512

57d36369001b799748aa9d81df37e7efa982a733bf27deb0a4015a8707342d2c20c1a0821ba0f5a3c1e49e19e267aec27a30845c39732a5f44d867f4acde2dca
SSDEEP

12288:NW48Uekie0ghBcS7lKrYsBEc7BdWFVIqa4HWaSA:NW48Uekie/BcS7lpUEaBdWFPaGWa

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3576	5F27.tmp

Executes dropped EXE 1 IoCs

pid	Process
3576	5F27.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2124 wrote to memory of 3576	2124	2024-03-05_4c44e1ac8625cc14df82555e92668638_mafia.exe	90
PID 2124 wrote to memory of 3576	2124	2024-03-05_4c44e1ac8625cc14df82555e92668638_mafia.exe	90
PID 2124 wrote to memory of 3576	2124	2024-03-05_4c44e1ac8625cc14df82555e92668638_mafia.exe	90

C:\Users\Admin\AppData\Local\Temp\2024-03-05_4c44e1ac8625cc14df82555e92668638_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-05_4c44e1ac8625cc14df82555e92668638_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2124
- C:\Users\Admin\AppData\Local\Temp\5F27.tmp
  "C:\Users\Admin\AppData\Local\Temp\5F27.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-05_4c44e1ac8625cc14df82555e92668638_mafia.exe FAF0AF8742ACAD026F006986E52DA5A0BFE7ACC84F7BC23D2314ED12A84C5902478D5230D54EB60F5DB0566C6A2C0AD120FE6E807DBD028F45669AB030AD0F72
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3576

C:\Users\Admin\AppData\Local\Temp\5F27.tmp

Filesize
435KB

MD5
8aaebdbe1daa1cc228e658d70bc02200

SHA1
86c3827bc4c0b2efe289df811ebc959c44b176f9

SHA256
ab0ce65043323f280688ab3b2eade9d9e6d0ec3afc0e093326dcb5cee635aeec

SHA512
ca2ef5f870bea03f07c597a272b3ea25bdc33d01dfb0ea36e30d5266958f93c7c672c67470ac3f37e9388542ad5cff3202ee0ef2803699a6cbd8341f9d8c8802

Download Submit