58ddb0f309d48f27fce5f8b5c55cc67c19cad2c3b9b0ae58c88e746ece422d5f

Analysis

max time kernel
144s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
08/03/2024, 16:36

Target

2024-03-08_f19f957fbf2f5f47b99170dd6fede579_mafia.exe
Size

468KB
MD5

f19f957fbf2f5f47b99170dd6fede579
SHA1

44df329881821b782263288c39f336a9e7887e2d
SHA256

58ddb0f309d48f27fce5f8b5c55cc67c19cad2c3b9b0ae58c88e746ece422d5f
SHA512

761fada1f1e4bb28b4237e9fca6927125c01e76066afe364d469a446ac1ddb0e21499703ed3685b788fce62653f1e92b64318d7049de1416f7ed6c74c0ab07b9
SSDEEP

12288:qO4rfItL8HGzMMFh/E77GNeFUxo+6hfuVpsXJ7bWmeEVGL:qO4rQtGGY77aNNo+WM8umeEVGL

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4876	8FCC.tmp

Executes dropped EXE 1 IoCs

pid	Process
4876	8FCC.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4076 wrote to memory of 4876	4076	2024-03-08_f19f957fbf2f5f47b99170dd6fede579_mafia.exe	88
PID 4076 wrote to memory of 4876	4076	2024-03-08_f19f957fbf2f5f47b99170dd6fede579_mafia.exe	88
PID 4076 wrote to memory of 4876	4076	2024-03-08_f19f957fbf2f5f47b99170dd6fede579_mafia.exe	88

C:\Users\Admin\AppData\Local\Temp\2024-03-08_f19f957fbf2f5f47b99170dd6fede579_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-08_f19f957fbf2f5f47b99170dd6fede579_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4076
- C:\Users\Admin\AppData\Local\Temp\8FCC.tmp
  "C:\Users\Admin\AppData\Local\Temp\8FCC.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-08_f19f957fbf2f5f47b99170dd6fede579_mafia.exe 615C02A0DE2AF4CDC666638799E7FFEEFA51E6516BE470948093976E522C4D9F13CF72EC5920D89D91EC2EFFE546DB3068766728E9532C477E422020D83447BA
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4876

C:\Users\Admin\AppData\Local\Temp\8FCC.tmp

Filesize
468KB

MD5
34c2f483aa4387a5da49b372d1fdf0cf

SHA1
35a78d620aaef4901e65fc647ec3d55f48c35f4b

SHA256
de16c025b8310fd2630790994468e1c40206c2ed3bb41559566590503e3335cd

SHA512
2d04aa91a30893d70a8985b474c608b36f37b90786bb73ba7ce1e4537c02221ec28dfa4184c4b87ed6599798c8d9ea8e9e403805cce15d26b021bb4b0905ebd8

Download Submit