be3185265764018025f6e763cbbc76d5386124c0bc387959dd68610be103d37a

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
05/03/2024, 12:46

Target

2024-03-05_62fc801ad15e2634e32ec5f2ece16efa_mafia.exe
Size

428KB
MD5

62fc801ad15e2634e32ec5f2ece16efa
SHA1

b2b00a04afc9270017cadb8040ab59e324a25bce
SHA256

be3185265764018025f6e763cbbc76d5386124c0bc387959dd68610be103d37a
SHA512

a3400ed6b354b27c79b04c7d3448df92772b5e32480a83c18f59fbcb107e5fe8e6934540caba27369f49ce444bb64d6c5214fb4c15b2ddbe7086197556243a0e
SSDEEP

6144:gVdvczEb7GUOpYWhNVynE/mF4Sg870Mv5phem07fILVrMpHlc4JM6CcqHR:gZLolhNVyEEgNMxph+aWB60M6TqHR

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3132	418D.tmp

Executes dropped EXE 1 IoCs

pid	Process
3132	418D.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4608 wrote to memory of 3132	4608	2024-03-05_62fc801ad15e2634e32ec5f2ece16efa_mafia.exe	87
PID 4608 wrote to memory of 3132	4608	2024-03-05_62fc801ad15e2634e32ec5f2ece16efa_mafia.exe	87
PID 4608 wrote to memory of 3132	4608	2024-03-05_62fc801ad15e2634e32ec5f2ece16efa_mafia.exe	87

C:\Users\Admin\AppData\Local\Temp\2024-03-05_62fc801ad15e2634e32ec5f2ece16efa_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-05_62fc801ad15e2634e32ec5f2ece16efa_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4608
- C:\Users\Admin\AppData\Local\Temp\418D.tmp
  "C:\Users\Admin\AppData\Local\Temp\418D.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-03-05_62fc801ad15e2634e32ec5f2ece16efa_mafia.exe 69BA862F82DAC31EC9AD016011C6125CB8E9E9EA5E8074CBFB884E7BB29FF649948068B895B86CDE20FC9A41AD8D45F8876EE64DB9EA14EDFADB2B65160E68C1
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3132

C:\Users\Admin\AppData\Local\Temp\418D.tmp

Filesize
428KB

MD5
3230faea80c1c257070a073b2b57596a

SHA1
4d8b699be0fd1c4ee05fdbb57f15661df582e2aa

SHA256
4c4174f07ef991ef175958c008467d1df6acd0bbcc8ff723e4d2104bfcbdbd49

SHA512
565515f90321087c732f827b0318da4580a0d9ef22d03ae97751b978536b0588727c4e639ad35cb0b9fb63510a24d543416fdd406f054479ede1aad1c461eec1

Download Submit