947a36cc385e8490d6fa4cd84bff8dce308cd202061526190196207df3f872a5

Analysis

max time kernel
91s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
19/03/2024, 14:25

Target
2024-03-19_00c20fe5096188f8cacba58dbe9f78cf_mafia.exe
Size 384KB
Sample240319-rq9hraea85
SHA256 947a36cc385e8490d6fa4cd84bff8dce308cd202061526190196207df3f872a5
MD5 00c20fe5096188f8cacba58dbe9f78cf
SHA1 f3a07ab1fa4464e4a806e9e0a122cdd86f1a01f1
SHA512 1aaf801183a77e89890c98d89ced3bf349cfd866adb9ddce08a8b59cadefc75a8fe74743e3bb12576816792aa6bedfa26338066053ec95598bb6ad9d9bf5bd26
SSDEEP 6144:drxfv4co9ZL3GBGgjODxbf7hHux1x1wpWRGOggEmII+iJnGvneC0OMkeudMh8GQZ:Zm48gODxbzYx1DRGRgEmhjgsOMkeudm8
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3044	4100.tmp

Executes dropped EXE 1 IoCs

pid	Process
3044	4100.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4796 wrote to memory of 3044	4796	2024-03-19_00c20fe5096188f8cacba58dbe9f78cf_mafia.exe	85
PID 4796 wrote to memory of 3044	4796	2024-03-19_00c20fe5096188f8cacba58dbe9f78cf_mafia.exe	85
PID 4796 wrote to memory of 3044	4796	2024-03-19_00c20fe5096188f8cacba58dbe9f78cf_mafia.exe	85

C:\Users\Admin\AppData\Local\Temp\2024-03-19_00c20fe5096188f8cacba58dbe9f78cf_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-19_00c20fe5096188f8cacba58dbe9f78cf_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4796
- C:\Users\Admin\AppData\Local\Temp\4100.tmp
  "C:\Users\Admin\AppData\Local\Temp\4100.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-03-19_00c20fe5096188f8cacba58dbe9f78cf_mafia.exe 42F26B8F26AE2F84767D44BB1B4D2CD964AF9468B59B665709EA06020276DF9AA56FF750164C0C2083207328F3D030A8FB796FDC23DB941DE9C49C893A79984A
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3044

4100.tmp

Path C:\Users\Admin\AppData\Local\Temp\4100.tmp
Size 384KB
SHA256 bf815e56ba830938fceb9b9283b0d0f136d2bc1d99285692738b8781cfb99498
MD5 32881a60f0e925d0315e925eae7a9ff6
SHA1 e0d2b8fdfee1748a29b44dc0d3f3482ede2d2610
SHA512 c8046aba50ac283eaf9d9ebaff2c7c8c29e1f95cc30f98c7070e31fa89a8ec4902c5ca963678c70230a481e730d75914ee2d78e4ad53851fc5f003b45c902660
SSDEEP 6144:drxfv4co9ZL3GBGgjODxbf7hHahleQwQS3ohJW4kwa+BEYdctnuVK3wSLRrhwZ:Zm48gODxbzoTWQS3yU4kOj07xl1wZ
MD5 SHA1 SHA512 SSDEEP

Submit Download