4ee235d6c9a39e250f566666b97614d73bb52da977939c86b906a6d132f04009

Analysis

max time kernel
140s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
19/03/2024, 19:28

Target

2024-03-19_1d8e293edb52bf94aee4832ddf23e0be_mafia.exe
Size

473KB
MD5

1d8e293edb52bf94aee4832ddf23e0be
SHA1

0d3704126759ccba3b51cd88872791cb8d65573b
SHA256

4ee235d6c9a39e250f566666b97614d73bb52da977939c86b906a6d132f04009
SHA512

2e22b2ae39a38230bf9cbe193ad4d109b3900fb623c1749bbe4c297d2de2413b44b67912c54ca489051f82cfbf0401b1720f5ab51a88b75fbeffaf46b15ee0ef
SSDEEP

6144:fFrJxvldL4c5ONK1xgWbd1s79+iStoIGmmyY1zBPqJs/x1hsQ8a/8UZv3350u5Mh:Nb4bZudi79LYtQBPM5aU1p67agfA0a

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2128	3D76.tmp

Executes dropped EXE 1 IoCs

pid	Process
2128	3D76.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3476 wrote to memory of 2128	3476	2024-03-19_1d8e293edb52bf94aee4832ddf23e0be_mafia.exe	89
PID 3476 wrote to memory of 2128	3476	2024-03-19_1d8e293edb52bf94aee4832ddf23e0be_mafia.exe	89
PID 3476 wrote to memory of 2128	3476	2024-03-19_1d8e293edb52bf94aee4832ddf23e0be_mafia.exe	89

C:\Users\Admin\AppData\Local\Temp\2024-03-19_1d8e293edb52bf94aee4832ddf23e0be_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-19_1d8e293edb52bf94aee4832ddf23e0be_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3476
- C:\Users\Admin\AppData\Local\Temp\3D76.tmp
  "C:\Users\Admin\AppData\Local\Temp\3D76.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-19_1d8e293edb52bf94aee4832ddf23e0be_mafia.exe 64D91D264FE14807EB5F3FBEC20CBBE1C87C380359554DDFB8C564180DB5F93E8DAC06C899A840A31654F9D16B359291B96D68975EF711EE518651E5A5BCC460
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2128

C:\Users\Admin\AppData\Local\Temp\3D76.tmp

Filesize
473KB

MD5
d4f6c766205cab79684d30fd8909ed10

SHA1
1e6c90c7b3bb6832d0a63babd19aab29dbd40f10

SHA256
97d857cb5f6f96669917def5fe1f8bdd53a923143656b6a1639578381e91bf94

SHA512
4587de39980bf55dacf8a74a5820e89682c8be7c1cabfe8182e91e81ba027a37a3383ac062cd7089ba5827789e704d3b4f4a333935f475c1cb0bff5ac14e7ca4

Download Submit