0d1c3f05db540328363572f8fb2828f3bc94048bbcc555f6ef16575904574c0f

Analysis

max time kernel
150s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10-03-2024 05:41

Target

2024-03-10_2c738dea3023117ee00b87078ca0189c_mafia.exe
Size

384KB
MD5

2c738dea3023117ee00b87078ca0189c
SHA1

f2de6f6a958f711df127220ab25fb11e470fe14a
SHA256

0d1c3f05db540328363572f8fb2828f3bc94048bbcc555f6ef16575904574c0f
SHA512

bab27043e856e5b86c83cc7b0db16fbda835d835cbf9b4f148b975cadfb2d4b89bcf8b4e41593837d5be6e028477ba89f5451b47efc724665b38493f821da6e1
SSDEEP

6144:drxfv4co9ZL3GBGgjODxbf7hHo8e2fxPSHVU4OsuZw1Jlfj3k7bIuZZ:Zm48gODxbz7UVLOsuZw13fbYbRZ

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2188	3393.tmp

Executes dropped EXE 1 IoCs

pid	Process
2188	3393.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2168 wrote to memory of 2188	2168	2024-03-10_2c738dea3023117ee00b87078ca0189c_mafia.exe	89
PID 2168 wrote to memory of 2188	2168	2024-03-10_2c738dea3023117ee00b87078ca0189c_mafia.exe	89
PID 2168 wrote to memory of 2188	2168	2024-03-10_2c738dea3023117ee00b87078ca0189c_mafia.exe	89

C:\Users\Admin\AppData\Local\Temp\2024-03-10_2c738dea3023117ee00b87078ca0189c_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-10_2c738dea3023117ee00b87078ca0189c_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2168
- C:\Users\Admin\AppData\Local\Temp\3393.tmp
  "C:\Users\Admin\AppData\Local\Temp\3393.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-03-10_2c738dea3023117ee00b87078ca0189c_mafia.exe A78C3F9C3141BCE841FE47A4791E85F10166BD2491A19B75589BD14B26A25434D442F93D5B8A373C9C48DE14409B6A6C18F7F6D50972923372904B6C96B9E47C
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2188

C:\Users\Admin\AppData\Local\Temp\3393.tmp

Filesize
384KB

MD5
784ed81ff351e30ce48c0e5516e24008

SHA1
2b6c8b086d2093e133c9ed7f6f71d86f3ed0a31c

SHA256
5b38634774312e6feaf394c2d01c0463e4788cc6cc60dfd0816327d264b0b2f4

SHA512
2d89be4c5aa7f533c3bc6a123474c6a2892d2d431d28ae827edbab4eafa5ff7e08311e1917d52454ac2d1c89211f040fdfae861d8c8d63b9aa45e707d3f11422

Download Submit