220ecfbe4bceacf64599c18a2df8cb10969500581785c8625414ed8222d59aeb

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06-03-2024 17:30

Target

2024-03-06_22252ad13d97ca2eb26451662d91b736_mafia.exe
Size

411KB
MD5

22252ad13d97ca2eb26451662d91b736
SHA1

004146f4f1c7fad1bdf9eb9718788b710d523870
SHA256

220ecfbe4bceacf64599c18a2df8cb10969500581785c8625414ed8222d59aeb
SHA512

1aa2e2277746ed49f3ff1b049102e631071d4c29e84ce8b78ccf84f69f94c5f8f75c6817a93f286196c36092de731a172c74905844edcb9beae59665f967c5a4
SSDEEP

6144:gVdvczEb7GUOpYWhNVynE/mF2ahVeWfBV0nPKwwaBxd8qHI:gZLolhNVyE7MVTB6nVd8qHI

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4148	4D93.tmp

Executes dropped EXE 1 IoCs

pid	Process
4148	4D93.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4288 wrote to memory of 4148	4288	2024-03-06_22252ad13d97ca2eb26451662d91b736_mafia.exe	88
PID 4288 wrote to memory of 4148	4288	2024-03-06_22252ad13d97ca2eb26451662d91b736_mafia.exe	88
PID 4288 wrote to memory of 4148	4288	2024-03-06_22252ad13d97ca2eb26451662d91b736_mafia.exe	88

C:\Users\Admin\AppData\Local\Temp\2024-03-06_22252ad13d97ca2eb26451662d91b736_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-06_22252ad13d97ca2eb26451662d91b736_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4288
- C:\Users\Admin\AppData\Local\Temp\4D93.tmp
  "C:\Users\Admin\AppData\Local\Temp\4D93.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-03-06_22252ad13d97ca2eb26451662d91b736_mafia.exe FB653F2943439B15F407B8A2F4574C91B443BBD7A7F064F05C84E77AFC77A4093B980597D5CD7FAF50A2BD13FFBCD71994A526A3274AE0B233B5D31E6A63F15A
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4148

C:\Users\Admin\AppData\Local\Temp\4D93.tmp

Filesize
411KB

MD5
4057a380e01b7dead93ef815a5359d5d

SHA1
8b310eebfa1673ef138e318747094d2fa3aa829d

SHA256
465974f1a070914134c7ed8eed68fc58c8e8e97568aa142d71fc93e2c4b8ec91

SHA512
93b73cf7946287848e32dc3861f116018d63561a06457677c789b295e03717aff4c6af625dcf368009d8e745a99df9dfe19beb5f325c10a2688f1ef2d2dd991b

Download Submit