69b5777267464b7b884848a11a55f0c1b8077db71356d2b4f2ded8eede32af39

Analysis

max time kernel
147s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
19/03/2024, 05:05

Target

2024-03-19_fd03a844b5f3d21ea33c546eed32b3e7_mafia.exe
Size

468KB
MD5

fd03a844b5f3d21ea33c546eed32b3e7
SHA1

464ebb10fd7f28d0245146d58d5c60eff023270a
SHA256

69b5777267464b7b884848a11a55f0c1b8077db71356d2b4f2ded8eede32af39
SHA512

3a4f91cd0bf9f3433a962e93116250bdb9e40c161f5140df6d36597e1e3d80cd4122822c25f843b4e8f8e13030461e1f547495dd7e50d50720562e90c969d045
SSDEEP

12288:qO4rfItL8HGuchg/IUUWPRNOBK7bWmeEVGL:qO4rQtGGJhUwBKumeEVGL

Score

7^/10

Deletes itself 1 IoCs

pid	Process
980	70CB.tmp

Executes dropped EXE 1 IoCs

pid	Process
980	70CB.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2728 wrote to memory of 980	2728	2024-03-19_fd03a844b5f3d21ea33c546eed32b3e7_mafia.exe	88
PID 2728 wrote to memory of 980	2728	2024-03-19_fd03a844b5f3d21ea33c546eed32b3e7_mafia.exe	88
PID 2728 wrote to memory of 980	2728	2024-03-19_fd03a844b5f3d21ea33c546eed32b3e7_mafia.exe	88

C:\Users\Admin\AppData\Local\Temp\2024-03-19_fd03a844b5f3d21ea33c546eed32b3e7_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-19_fd03a844b5f3d21ea33c546eed32b3e7_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2728
- C:\Users\Admin\AppData\Local\Temp\70CB.tmp
  "C:\Users\Admin\AppData\Local\Temp\70CB.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-19_fd03a844b5f3d21ea33c546eed32b3e7_mafia.exe 755C417CC7A39C6B4C88542E568873957D64FBA321A1CC0A4D166FDC920FA6384EE4F0DEFC5C4B4BACAF1B18774B7AF7E4D84099B38BF50C2D23EBD5BE14D93E
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:980

C:\Users\Admin\AppData\Local\Temp\70CB.tmp

Filesize
468KB

MD5
41f9f1578a7a75015982f5b99b150404

SHA1
623600f182ffd7c25d6dcc14145782359de9aa16

SHA256
d1521bdfc2e91fbbc395bf44e3de78dde453c6ea363b3d119c86265c4c63e30f

SHA512
7498149830a6e29bd87750e7c68baa81c00ea01dbdf6693f5196bc9dbd5e80c02b53a305a52858884f684049869e4be9dbac1c19fd5bd1d2c1414bd8e18beefa

Download Submit