5f6bc216d793c5109192d3437c16959f3e21450794362cfa6edad7c0ad0ed574

Analysis

max time kernel
127s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
09/03/2024, 18:33

Target

2024-03-09_2fb8aa0b5da25f4469119e9984a7ab10_mafia.exe
Size

468KB
MD5

2fb8aa0b5da25f4469119e9984a7ab10
SHA1

f272fbe8f1c580c665b398fe5fd924ac71611b74
SHA256

5f6bc216d793c5109192d3437c16959f3e21450794362cfa6edad7c0ad0ed574
SHA512

8f3cec028cc8e3b40c5485e964cd29127d329507d42cfc0d35e3454249a2fa5a85ab6147d894acaa44b16947c907bf986af24b272d057e70e33b17282c7a4c88
SSDEEP

12288:qO4rfItL8HG2OjeACFpUN3UM+S8vEYxpaWtN7bWmeEVGL:qO4rQtGGZbEM+7/xsKNumeEVGL

Score

7^/10

Deletes itself 1 IoCs

pid	Process
5012	3604.tmp

Executes dropped EXE 1 IoCs

pid	Process
5012	3604.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3820 wrote to memory of 5012	3820	2024-03-09_2fb8aa0b5da25f4469119e9984a7ab10_mafia.exe	88
PID 3820 wrote to memory of 5012	3820	2024-03-09_2fb8aa0b5da25f4469119e9984a7ab10_mafia.exe	88
PID 3820 wrote to memory of 5012	3820	2024-03-09_2fb8aa0b5da25f4469119e9984a7ab10_mafia.exe	88

C:\Users\Admin\AppData\Local\Temp\2024-03-09_2fb8aa0b5da25f4469119e9984a7ab10_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-09_2fb8aa0b5da25f4469119e9984a7ab10_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3820
- C:\Users\Admin\AppData\Local\Temp\3604.tmp
  "C:\Users\Admin\AppData\Local\Temp\3604.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-09_2fb8aa0b5da25f4469119e9984a7ab10_mafia.exe F7B6930720C165A161B4AFA09B0F0836C2F42DADCA9334A496B62CCDAB752AB8D9907AE72DF9E60258A6025F4759E462B719266772624B13FB6D5883CC9F5861
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:5012

C:\Users\Admin\AppData\Local\Temp\3604.tmp

Filesize
468KB

MD5
119d0ecdc22ca7e918c748e2900e6f3f

SHA1
8f2daf45bad0dd6eb2ca1e22a7c831d6d9d9f5c1

SHA256
5a05f49f3f3c9c54b10fd89b9a266f921171affed5c0cfe9569d260bfc09aa33

SHA512
0905d30d4293e2158267f3ad0a64adc0ec6a1fab9f0b18de35a099f720b6e9be818ae50c6dba4398c88ffbd9bc7c18bffb186bc2b8411f4ec468c54e17b3c794

Download Submit