5007a2f7dd51db3cf326b95fc42feb025935c70cb3b8f64bf729dacd644de6f8

Analysis

max time kernel
146s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06/03/2024, 13:32

Target

2024-03-06_494d6a8e7fbc07e15b11d6508b4f72c4_mafia.exe
Size

486KB
MD5

494d6a8e7fbc07e15b11d6508b4f72c4
SHA1

16a62e83438a5ea3685950d5f24acad9f62c7e9b
SHA256

5007a2f7dd51db3cf326b95fc42feb025935c70cb3b8f64bf729dacd644de6f8
SHA512

7ea98ba27f2b3103616dfeb5db6cf7b7e139bba272c08a05f0208880186058cab63575fca4f25fd55ca44b45ffcda4887de63461d388dfdd2e19317a7f447f04
SSDEEP

12288:3O4rfItL8HPd5og4WKntwvJl7rKxUYXhW:3O4rQtGPd5F47wvX3KxUYXhW

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3316	8F9D.tmp

Executes dropped EXE 1 IoCs

pid	Process
3316	8F9D.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4460 wrote to memory of 3316	4460	2024-03-06_494d6a8e7fbc07e15b11d6508b4f72c4_mafia.exe	90
PID 4460 wrote to memory of 3316	4460	2024-03-06_494d6a8e7fbc07e15b11d6508b4f72c4_mafia.exe	90
PID 4460 wrote to memory of 3316	4460	2024-03-06_494d6a8e7fbc07e15b11d6508b4f72c4_mafia.exe	90

C:\Users\Admin\AppData\Local\Temp\2024-03-06_494d6a8e7fbc07e15b11d6508b4f72c4_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-06_494d6a8e7fbc07e15b11d6508b4f72c4_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4460
- C:\Users\Admin\AppData\Local\Temp\8F9D.tmp
  "C:\Users\Admin\AppData\Local\Temp\8F9D.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-06_494d6a8e7fbc07e15b11d6508b4f72c4_mafia.exe 231A6901F72D1DEA5C64D0D1892B2D169448FFF49EB27A93294C0D9857669DE4187E491411ED3CD8D5A98AA3F380C5D2D76031A12B9A89B946F08FF2A707FCBB
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3316

C:\Users\Admin\AppData\Local\Temp\8F9D.tmp

Filesize
486KB

MD5
8edc4a6030391c75fc418cb3dc2729ee

SHA1
2b4ea191af9835981dec09f77dd0e9f19d7e0d81

SHA256
38ff493c278796b712f369981db78e638469c9f841e1e551e69a51e2157e890b

SHA512
ba9e2a2ab5c72913423ab17d0931b7799e76f11c8a49e5aee014470559c2a49e018a3bd0ce1623ca8d4e8866926540710309c69d89fd5ae36dc86264cbc38739

Download Submit