6306154c5af865e2d43d170caa955d272bc1c4fb42855a8c5d09c815d539aeb6

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
16/03/2024, 12:45

Target

2024-03-16_ce24bd16f05fada69ee820823e0eae2c_mafia.exe
Size

486KB
MD5

ce24bd16f05fada69ee820823e0eae2c
SHA1

2a7120878314d512c66706532c7660636c3967b3
SHA256

6306154c5af865e2d43d170caa955d272bc1c4fb42855a8c5d09c815d539aeb6
SHA512

72fb23f1310811951820a97d7e842474ddbb44da35034049fa9d4898b7c0b38819399bc80208a3101329989b824f473d1958518d07ef3e034524da144c3dfc23
SSDEEP

12288:3O4rfItL8HPU5GBzoEq2CNuckVqTS8anoVm0O/7rKxUYXhW:3O4rQtGPU5FEq2MIqTwnCm0O/3KxUYX0

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2136	33C2.tmp

Executes dropped EXE 1 IoCs

pid	Process
2136	33C2.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3412 wrote to memory of 2136	3412	2024-03-16_ce24bd16f05fada69ee820823e0eae2c_mafia.exe	89
PID 3412 wrote to memory of 2136	3412	2024-03-16_ce24bd16f05fada69ee820823e0eae2c_mafia.exe	89
PID 3412 wrote to memory of 2136	3412	2024-03-16_ce24bd16f05fada69ee820823e0eae2c_mafia.exe	89

C:\Users\Admin\AppData\Local\Temp\2024-03-16_ce24bd16f05fada69ee820823e0eae2c_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-16_ce24bd16f05fada69ee820823e0eae2c_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3412
- C:\Users\Admin\AppData\Local\Temp\33C2.tmp
  "C:\Users\Admin\AppData\Local\Temp\33C2.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-16_ce24bd16f05fada69ee820823e0eae2c_mafia.exe 8D5583D8DF3FF101DD6A8A1B2DA591672BC78937947C93195E9984BDBF7B4BDBA1CD4AA6817C8BFDD6B73130E94671B2E6278F1E0EFA7F19104DD20DE1A3386D
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2136

C:\Users\Admin\AppData\Local\Temp\33C2.tmp

Filesize
486KB

MD5
c8d2ef2aea7d57c047eb3a897d35f139

SHA1
a37963002c6cb9ebee47c6f398a0d4d486f89dad

SHA256
4387286f3ec9cb4687d7f274d1a72ccbff8eda7752f96bc0b11f2c75d8f3a58c

SHA512
e39ebee3e5e7da66ed0da491172a5ee9b8522ea9f35ccda67e6fe98bfa27174dd1b24e4fa4ab11cc4ac32357ab83072c7dd62ffae7a8c0ecfd7c559b50b55008

Download Submit