8c375bc8912645199fc2ef1fd6c43770a193fd548219be92a27addf45459291c

Analysis

max time kernel
150s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10/03/2024, 06:30

Target

2024-03-10_dea2f56adc7ab69b3fa087e53076a618_mafia.exe
Size

486KB
MD5

dea2f56adc7ab69b3fa087e53076a618
SHA1

e28b380d3b1c90f0a3562f349ffc2c0854a607f1
SHA256

8c375bc8912645199fc2ef1fd6c43770a193fd548219be92a27addf45459291c
SHA512

be83099eba614bb8db54b47318f2a363c8565c3ae48ebf3a83473797b3abfa9e72d3d7fa9375e027cf310b6e0b54ad6894cd70910ec96a3495bd6152dcbf8cdb
SSDEEP

12288:3O4rfItL8HP27LX1Ghwx7Rzz26PQ7rKxUYXhW:3O4rQtGP2qwNdS3KxUYXhW

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2132	6E69.tmp

Executes dropped EXE 1 IoCs

pid	Process
2132	6E69.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4464 wrote to memory of 2132	4464	2024-03-10_dea2f56adc7ab69b3fa087e53076a618_mafia.exe	92
PID 4464 wrote to memory of 2132	4464	2024-03-10_dea2f56adc7ab69b3fa087e53076a618_mafia.exe	92
PID 4464 wrote to memory of 2132	4464	2024-03-10_dea2f56adc7ab69b3fa087e53076a618_mafia.exe	92

C:\Users\Admin\AppData\Local\Temp\2024-03-10_dea2f56adc7ab69b3fa087e53076a618_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-10_dea2f56adc7ab69b3fa087e53076a618_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4464
- C:\Users\Admin\AppData\Local\Temp\6E69.tmp
  "C:\Users\Admin\AppData\Local\Temp\6E69.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-10_dea2f56adc7ab69b3fa087e53076a618_mafia.exe A9242146F58AE3C599EEF03307679DEBD12E43A5609D8121EE202D139FD8524C4D01DD08705AF76DE97295281C43BA326B6A31F25E241B2E16DC756442CB298D
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2132

C:\Users\Admin\AppData\Local\Temp\6E69.tmp

Filesize
486KB

MD5
6a35e63abf69c4ed9812f51982e30011

SHA1
75ee1dd44e940b234b41e80e4a068465ff654040

SHA256
dc5b07cbd203b3ce6d0ecb52aa2374dffc74d82ddd42c8c1ba2ce7d622d04063

SHA512
784330df002d3f34e9ffa8ea27e872450543cc9fc2ade34ef940ab09fd1223afcd393f8738916be75b9a2873aa5b4770830940844f2b8c8a6bba01429ef54d47

Download Submit