481bdb6d36db7ddea0310fed0badae7bb42fee64b02dfc7bd32a9ab29785a521

Analysis

max time kernel
150s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
14-03-2024 10:52

Target

2024-03-14_f2b55982418eb72fa03ab9b5d93bebe1_mafia.exe
Size

468KB
MD5

f2b55982418eb72fa03ab9b5d93bebe1
SHA1

c2df297f3652f8777f798e08e188d6c93666683e
SHA256

481bdb6d36db7ddea0310fed0badae7bb42fee64b02dfc7bd32a9ab29785a521
SHA512

22cf19a0bd790e5cab36b9fb815bc502d87a01596a9f3b54f273131e95c17d7b99b6c0e16df1c72a8516ff9a4124b381cfe840b3e1c21d9f933b9ad1c9c6e0cb
SSDEEP

12288:qO4rfItL8HGphHh/X+omHnPTUTK0s7bWmeEVGL:qO4rQtGGjp2HnP4K0sumeEVGL

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3412	41EB.tmp

Executes dropped EXE 1 IoCs

pid	Process
3412	41EB.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5028 wrote to memory of 3412	5028	2024-03-14_f2b55982418eb72fa03ab9b5d93bebe1_mafia.exe	89
PID 5028 wrote to memory of 3412	5028	2024-03-14_f2b55982418eb72fa03ab9b5d93bebe1_mafia.exe	89
PID 5028 wrote to memory of 3412	5028	2024-03-14_f2b55982418eb72fa03ab9b5d93bebe1_mafia.exe	89

C:\Users\Admin\AppData\Local\Temp\2024-03-14_f2b55982418eb72fa03ab9b5d93bebe1_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-14_f2b55982418eb72fa03ab9b5d93bebe1_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5028
- C:\Users\Admin\AppData\Local\Temp\41EB.tmp
  "C:\Users\Admin\AppData\Local\Temp\41EB.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-14_f2b55982418eb72fa03ab9b5d93bebe1_mafia.exe A27FB3CF77976262E905B45CD8F4CDAE6C09A13E7D2061C7957C51530DA9655531892C26F8F4F1D4D51E99350A06598D310D18359050CFE6B5D848A9357CC7A3
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3412

C:\Users\Admin\AppData\Local\Temp\41EB.tmp

Filesize
468KB

MD5
f7428989f77d9dae2742eec94a5bef82

SHA1
823c7ae6dbdd677ebe405b926c589a8f4dfcb37b

SHA256
5c3a40fbf9d732f20b9db83795f6fda4feab10a01576edc0cefbc17f6ca21116

SHA512
57c77d995b15ae7180d6d20b3523b8106debe10fe9fd24e8bc45a07628648589d111619391908501865cdb866fd2c9615f571cfbe347003aee8bc9da8857bd11

Download Submit