007a580b170ee0d109bf5cf8d017ea5ea25022c061203baf1be844120c1d04e6

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
16/03/2024, 12:43

Target

2024-03-16_bf75caf900fc242e84b894f64999bc43_mafia.exe
Size

428KB
MD5

bf75caf900fc242e84b894f64999bc43
SHA1

ef7f3c255e7fd41e9d0a739b093a718df770a16e
SHA256

007a580b170ee0d109bf5cf8d017ea5ea25022c061203baf1be844120c1d04e6
SHA512

6c9fb23d03a7f76482b470b92ab2929b76d80cdca7c201eca237a22197c6d39a04737e0caa42baa168da17de530f0f754f74ea1b100c3aa3bfc7d85997ffd0c6
SSDEEP

12288:Z594+AcL4tBekiuKzErW+dlWuGHjxwRuerG6l:BL4tBekiuVrWdpNm5n

Score

7^/10

Deletes itself 1 IoCs

pid	Process
1920	4805.tmp

Executes dropped EXE 1 IoCs

pid	Process
1920	4805.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4684 wrote to memory of 1920	4684	2024-03-16_bf75caf900fc242e84b894f64999bc43_mafia.exe	88
PID 4684 wrote to memory of 1920	4684	2024-03-16_bf75caf900fc242e84b894f64999bc43_mafia.exe	88
PID 4684 wrote to memory of 1920	4684	2024-03-16_bf75caf900fc242e84b894f64999bc43_mafia.exe	88

C:\Users\Admin\AppData\Local\Temp\2024-03-16_bf75caf900fc242e84b894f64999bc43_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-16_bf75caf900fc242e84b894f64999bc43_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4684
- C:\Users\Admin\AppData\Local\Temp\4805.tmp
  "C:\Users\Admin\AppData\Local\Temp\4805.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-16_bf75caf900fc242e84b894f64999bc43_mafia.exe 35A89FF4C660698DF4084D5A166BFF0F2C46503692E865E4A2AC0B7A223CFFDFF909C012B0D5A714DC43E3A2707D6D14CC7788C80922D66FF7ABFC80F8BA9370
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:1920

C:\Users\Admin\AppData\Local\Temp\4805.tmp

Filesize
428KB

MD5
0915c8d9bc880de2c5f5b6cba1626d89

SHA1
8b2bc1959f916adcf76e528d66a718b62c6ea610

SHA256
567f083203428f2ae36f8457488045592f658630b126922702069b3bf3c2668b

SHA512
837d2caa5122bc70942c9f14ae056127c921012335e71ddd8123b54a117292ea8a8e63349959c637a14b9f223232717ba8dc77bb570f3fb6f1db0a95018de4c4

Download Submit