cf48f0ca56c7a2d5290a6fa4c60f387b9e57aa745ebf5b57974acaf7d9ef51b6

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06/03/2024, 00:41

Target

2024-03-06_a131c4b67160ee5560ff690e8b0f33d4_mafia.exe
Size

413KB
MD5

a131c4b67160ee5560ff690e8b0f33d4
SHA1

766d43c3635b5aa58c40f2b7ce5231e234bad078
SHA256

cf48f0ca56c7a2d5290a6fa4c60f387b9e57aa745ebf5b57974acaf7d9ef51b6
SHA512

aecff1f9d3ac5d0c2ec16947880f38a6f7225ab4c7da91535982dbb9920157bae92a57064aeed49a6f88e99d2f372ca14b55f73f67451a13c4630de38e007177
SSDEEP

6144:gVdvczEb7GUOpYWhNVynE/mFO0oXViVR6Jtd/SBrLrngigyElhAneqHg:gZLolhNVyEt0oFiD6/d/SlLHgzrOeqHg

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3740	3141.tmp

Executes dropped EXE 1 IoCs

pid	Process
3740	3141.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2788 wrote to memory of 3740	2788	2024-03-06_a131c4b67160ee5560ff690e8b0f33d4_mafia.exe	88
PID 2788 wrote to memory of 3740	2788	2024-03-06_a131c4b67160ee5560ff690e8b0f33d4_mafia.exe	88
PID 2788 wrote to memory of 3740	2788	2024-03-06_a131c4b67160ee5560ff690e8b0f33d4_mafia.exe	88

C:\Users\Admin\AppData\Local\Temp\2024-03-06_a131c4b67160ee5560ff690e8b0f33d4_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-06_a131c4b67160ee5560ff690e8b0f33d4_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2788
- C:\Users\Admin\AppData\Local\Temp\3141.tmp
  "C:\Users\Admin\AppData\Local\Temp\3141.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-03-06_a131c4b67160ee5560ff690e8b0f33d4_mafia.exe 9DC4D6F0ADBAF73F34354347D6CEB6186C1AE86024F505406028E55E95C2EADB8BEB58C17FC7CDA884F26FCB078F4203E30B703AF81EF40D37D4496596E0E6CA
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3740

C:\Users\Admin\AppData\Local\Temp\3141.tmp

Filesize
413KB

MD5
d94b327983807c14d3f2702c69dc2917

SHA1
9bea5a0dbb8c4fa87b39d451ab3aa5ce75f91ae7

SHA256
43067f332f5f4d41725fa50446aca8364e6bb8f59d174b59c8156699812bdc21

SHA512
c1f8d01105b40f9dfb2414a1fb8d731d50d9697afa242beb4f74fbb4d0cb32e43dd4e010f4f040f53259be01f67ab03ec7998a9dc3ce77794abc8261a97d42e9

Download Submit