5975860fbcc068d164bdb70e98fa258f6eac74e534d2af6418ae4655662acf2d

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
12/03/2024, 20:39

Target

2024-03-12_cf1cd8c5532819857bf9b54cade08edb_mafia.exe
Size

433KB
MD5

cf1cd8c5532819857bf9b54cade08edb
SHA1

9e78144250c4db2fb410f382fc8abd7f98f5cc5b
SHA256

5975860fbcc068d164bdb70e98fa258f6eac74e534d2af6418ae4655662acf2d
SHA512

b031b6c5923412ae0de2391e97d29c646de5f833c1882c0d0a322c9e5c0b2971860f5f68f5acf30404d8c61d77d27eff4285cc9f1aa96e7394ec7fb6150ce125
SSDEEP

6144:Cajdz4sTdDyyqiOXpOd0p6Jiv+vtvejud+1QHwvRsZYGQEyHnz7xhA4CPbH2n:Ci4g+yU+0pAiv+9dGvRoYGdyHzvA4YKn

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3088	59F7.tmp

Executes dropped EXE 1 IoCs

pid	Process
3088	59F7.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 460 wrote to memory of 3088	460	2024-03-12_cf1cd8c5532819857bf9b54cade08edb_mafia.exe	86
PID 460 wrote to memory of 3088	460	2024-03-12_cf1cd8c5532819857bf9b54cade08edb_mafia.exe	86
PID 460 wrote to memory of 3088	460	2024-03-12_cf1cd8c5532819857bf9b54cade08edb_mafia.exe	86

C:\Users\Admin\AppData\Local\Temp\2024-03-12_cf1cd8c5532819857bf9b54cade08edb_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-12_cf1cd8c5532819857bf9b54cade08edb_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:460
- C:\Users\Admin\AppData\Local\Temp\59F7.tmp
  "C:\Users\Admin\AppData\Local\Temp\59F7.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-12_cf1cd8c5532819857bf9b54cade08edb_mafia.exe 68A6FA4B06094FB5568A1F4A7B8BB5CF73646F07AEC89C882090E96F7EFA362EEF18C2BC0ABA8CD368AA2494057782BCD23B06D9485A3B4E1DCE2C3089F498B1
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3088

C:\Users\Admin\AppData\Local\Temp\59F7.tmp

Filesize
433KB

MD5
4d6f388daf6bfefdc9863bc72e56ef41

SHA1
dd27d21702a543b9794af3526f796a39eeda23ec

SHA256
1219572e409b166e2f78cd0ecaab65fbfc3fe941eb901cb27e32fe30434e44b8

SHA512
2982d3d487b5467f2948dd0a34e93838c99df901b884327cf2a2c188028305d7ba990c84feb8eb23530b57f61be0f6d5b222f884e2e5ba00167f8f39dc0b2d55

Download Submit