f9bc5c30e2c542ec06effd57d6cde66d3fc0333420a08375d30a39802666b327

Analysis

max time kernel
148s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
11-03-2024 22:24

Target

2024-03-11_0d2461079a02ee7075562fd07c464079_mafia.exe
Size

479KB
MD5

0d2461079a02ee7075562fd07c464079
SHA1

e50891d47948b2eeddacba9f0a50f739b76889f5
SHA256

f9bc5c30e2c542ec06effd57d6cde66d3fc0333420a08375d30a39802666b327
SHA512

f7b4c80aff2c1515a98dd469264eff4f9d455fe76e0fea6409e9e77bf452b25d34482379747eb097b09d14618de84304dc0fc94303432b057a2cc4af1798d19b
SSDEEP

6144:b9EyS4oMxIkjxcWqHtg88HARRjHHYPZhzBudE3IJ39TsQM2S3YYYFkYbGW1dUD7z:bO4rfItL8HAzYPdqEALUUyYndUD75UO

Score

7^/10

Deletes itself 1 IoCs

pid	Process
1264	64C5.tmp

Executes dropped EXE 1 IoCs

pid	Process
1264	64C5.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2112 wrote to memory of 1264	2112	2024-03-11_0d2461079a02ee7075562fd07c464079_mafia.exe	89
PID 2112 wrote to memory of 1264	2112	2024-03-11_0d2461079a02ee7075562fd07c464079_mafia.exe	89
PID 2112 wrote to memory of 1264	2112	2024-03-11_0d2461079a02ee7075562fd07c464079_mafia.exe	89

C:\Users\Admin\AppData\Local\Temp\2024-03-11_0d2461079a02ee7075562fd07c464079_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-11_0d2461079a02ee7075562fd07c464079_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2112
- C:\Users\Admin\AppData\Local\Temp\64C5.tmp
  "C:\Users\Admin\AppData\Local\Temp\64C5.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-11_0d2461079a02ee7075562fd07c464079_mafia.exe 1410E8F2900807C64FBC0802295205CFD4912599FDB2A6E2BFB6CCC5049BF324ED512CF724010FDAE0CDEF2E0D52ACC4B8DA0EFBAD33CCADAB6F0BC42A3BEF0E
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:1264

C:\Users\Admin\AppData\Local\Temp\64C5.tmp

Filesize
479KB

MD5
1ae37fb7f0f51b8871d0b200454f7e7c

SHA1
7cd27132a8f94e9837a8a233f22a4c21201ee4b8

SHA256
416bf57ad60f49a35acd8dd03e25e1a7925d0f48e3f2922884a0395c103c9193

SHA512
af7ebc0659b3354d5337dd05927a0d6b69a76aa822d2c02100914c9308b012eeedde63c2adf70cbc2654bae6cfcf888494543015dc872d19a82756e89fded63f

Download Submit