b192d11a9c35e2e9e28c3e0c0601c131b8df9a077b26afcce4e2185aa16551a4

Analysis

max time kernel
150s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
09/03/2024, 15:32

Target

2024-03-09_3b313b626a06b532afcc113f83061c53_mafia.exe
Size

433KB
MD5

3b313b626a06b532afcc113f83061c53
SHA1

d398d7b13b3debebbeef84a9ce3d144398f7827e
SHA256

b192d11a9c35e2e9e28c3e0c0601c131b8df9a077b26afcce4e2185aa16551a4
SHA512

2ea8154a0ee1966de7d42e4977f71971423e9ce45ca32a887102207a2c5d04d565cbde5cb79bf9686c0769785c974360de43c933debea6a6828a1d4c3f2274f9
SSDEEP

12288:Ci4g+yU+0pAiv+GfvPfSdeUnD6FDMhkJq8dEn:Ci4gXn0pD+GfqdeAmFMhkQ

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2172	3DC4.tmp

Executes dropped EXE 1 IoCs

pid	Process
2172	3DC4.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4668 wrote to memory of 2172	4668	2024-03-09_3b313b626a06b532afcc113f83061c53_mafia.exe	89
PID 4668 wrote to memory of 2172	4668	2024-03-09_3b313b626a06b532afcc113f83061c53_mafia.exe	89
PID 4668 wrote to memory of 2172	4668	2024-03-09_3b313b626a06b532afcc113f83061c53_mafia.exe	89

C:\Users\Admin\AppData\Local\Temp\2024-03-09_3b313b626a06b532afcc113f83061c53_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-09_3b313b626a06b532afcc113f83061c53_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4668
- C:\Users\Admin\AppData\Local\Temp\3DC4.tmp
  "C:\Users\Admin\AppData\Local\Temp\3DC4.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-09_3b313b626a06b532afcc113f83061c53_mafia.exe 537227A74608E8830FE2B94BC2B4287715D35FE297DBB313D6B0E9DA0B6CA0B0A3733F8812AFBC8BD44D07A3757D0D6F4CA797F1FECF74F1388C73702E26E3EE
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2172

C:\Users\Admin\AppData\Local\Temp\3DC4.tmp

Filesize
433KB

MD5
41ee9afabf40c628771621b81ff1cff7

SHA1
ebe1fd8844926bd7e338582f6c39abd619bfe8c2

SHA256
562b1098c6964139db78ca619c8a725a554ac680aa1fbf49492cb86ed7de4d19

SHA512
4f10568332a51526f16585ef91e0c4fc1ab84218d059f9839be34de7593c242c77a7823010157d97e3a1ca71d1af015eef9cce5ea99b93db1b7ee5c17c63dca7

Download Submit