27aae5fc090cd32ae611b6a34143d5b20d629c280e6d4605f9a81f9e34e05251

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06-03-2024 13:46

Target

2024-03-06_d3bd8816bab9455662ec1a4626dbae7c_mafia.exe
Size

428KB
MD5

d3bd8816bab9455662ec1a4626dbae7c
SHA1

21da27b775491a0eb64cbfcaf127a1630dafc4b3
SHA256

27aae5fc090cd32ae611b6a34143d5b20d629c280e6d4605f9a81f9e34e05251
SHA512

8ff4fd3c3c6d30e55742257699217d60edda3cf53c9f54704f7be826fbf6b97fff673054e2547fa76b3b47884d4313ed4052a1110d1cc707cffe13cfe201fc9c
SSDEEP

12288:Z594+AcL4tBekiuKzEr4uWfYOq8F3hlCxaDWgUnY9vo/l:BL4tBekiuVrXOlCxSWPY9va

Score

7^/10

Deletes itself 1 IoCs

pid	Process
1768	56DA.tmp

Executes dropped EXE 1 IoCs

pid	Process
1768	56DA.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1628 wrote to memory of 1768	1628	2024-03-06_d3bd8816bab9455662ec1a4626dbae7c_mafia.exe	88
PID 1628 wrote to memory of 1768	1628	2024-03-06_d3bd8816bab9455662ec1a4626dbae7c_mafia.exe	88
PID 1628 wrote to memory of 1768	1628	2024-03-06_d3bd8816bab9455662ec1a4626dbae7c_mafia.exe	88

C:\Users\Admin\AppData\Local\Temp\2024-03-06_d3bd8816bab9455662ec1a4626dbae7c_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-06_d3bd8816bab9455662ec1a4626dbae7c_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1628
- C:\Users\Admin\AppData\Local\Temp\56DA.tmp
  "C:\Users\Admin\AppData\Local\Temp\56DA.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-06_d3bd8816bab9455662ec1a4626dbae7c_mafia.exe 28F1510417F0F1D32B67786B62C55AC4C71C20ED48403CE58267B97F1216A5B705F2DE90A01951467EE4A8E60E833582BC30E8D88DF610B413D01D0A9F1B68CE
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:1768

C:\Users\Admin\AppData\Local\Temp\56DA.tmp

Filesize
428KB

MD5
9615a4994c6af4b5525b58d8653cd4f5

SHA1
51d8ae9f35bcf06d6087d27c086846a8d93603f2

SHA256
53b2b8d37692aec726aeb70e5dab38f35d06f964e59ba3f6a8dfa7dd2c458bf9

SHA512
3c6e879053dfd6e578cb78fe6ae01a241203d16e77382a6d0ff58ac26824ea877fa6dea9253779b478bd18d3e0d18584e275e998529315b3db6737c2f0182602

Download Submit