360ffba26d460d83ed86140d08926cd307042032b36c351f77dcc33d12d4b687

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06/03/2024, 05:24

Target

2024-03-06_0101953e246d9212e4d2e5ae836b9c26_mafia.exe
Size

428KB
MD5

0101953e246d9212e4d2e5ae836b9c26
SHA1

052284106d13d2223e264232176f9d49789e06f7
SHA256

360ffba26d460d83ed86140d08926cd307042032b36c351f77dcc33d12d4b687
SHA512

404a87531017d572e6982397e15b14f2f10ce81470192754f2d2cd600880dca40edd2182ff6cce9055c14b2c68078792b0fede549e1cf88b4d2c382c1802db01
SSDEEP

6144:gVdvczEb7GUOpYWhNVynE/mFoSQa6W0RWWMG8J7HME8Rjju6nHD41sqHR:gZLolhNVyE7VW0RKVHl8NjrHD4KqHR

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2972	52F2.tmp

Executes dropped EXE 1 IoCs

pid	Process
2972	52F2.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2976 wrote to memory of 2972	2976	2024-03-06_0101953e246d9212e4d2e5ae836b9c26_mafia.exe	88
PID 2976 wrote to memory of 2972	2976	2024-03-06_0101953e246d9212e4d2e5ae836b9c26_mafia.exe	88
PID 2976 wrote to memory of 2972	2976	2024-03-06_0101953e246d9212e4d2e5ae836b9c26_mafia.exe	88

C:\Users\Admin\AppData\Local\Temp\2024-03-06_0101953e246d9212e4d2e5ae836b9c26_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-06_0101953e246d9212e4d2e5ae836b9c26_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2976
- C:\Users\Admin\AppData\Local\Temp\52F2.tmp
  "C:\Users\Admin\AppData\Local\Temp\52F2.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-03-06_0101953e246d9212e4d2e5ae836b9c26_mafia.exe E1A19FFB7EA504349ABA796D68DB71F780416F4AE0F5C995425E45F9901275083FEC90F5B944CBD23DE7B3ABF566F0302B54A34E588A51DD226E39E691E4F013
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2972

C:\Users\Admin\AppData\Local\Temp\52F2.tmp

Filesize
428KB

MD5
d08ae344d6cfc7758305079b6f0ce746

SHA1
38d57b6c5a2cd8e7bda580e77a7e6c7ba6e46141

SHA256
4f3ea2c93835d9ee0563a3ee7542051513c22dd62d904e202c764590cc844ec8

SHA512
1dc9cfb384bff0c4411bf51239d73818a77ddb98c1afd573438f2cfe65a1e62549157e993bb90ee721daaf062f7bd53ee8a4c89dceb343c14bc8ea3e6ac7e18f

Download Submit