dc6c30bbe9988ff011a606956a49792ad1ee3b4f77a783bc0e0451c878a66b83

Analysis

max time kernel
133s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
26-03-2024 23:28

Target

2024-03-26_3c3d294c38086908dc7099b6a966e91f_mafia.exe
Size

479KB
MD5

3c3d294c38086908dc7099b6a966e91f
SHA1

1277b75c8a5251a0331b08684ceb3f7a45327962
SHA256

dc6c30bbe9988ff011a606956a49792ad1ee3b4f77a783bc0e0451c878a66b83
SHA512

4af79d2693ccc2bcb4a84a25b764db9660312c1af451cc7e3661619832703eda6883e7b151338df0f4dca74858ea1e46f27a9739074cc10db958f1b584fcb1b6
SSDEEP

12288:bO4rfItL8HADMqCEkPZHLLO5iYVXT75UO:bO4rQtGADrCEMZry5iY5TVUO

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4448	4229.tmp

Executes dropped EXE 1 IoCs

pid	Process
4448	4229.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1712 wrote to memory of 4448	1712	2024-03-26_3c3d294c38086908dc7099b6a966e91f_mafia.exe	89
PID 1712 wrote to memory of 4448	1712	2024-03-26_3c3d294c38086908dc7099b6a966e91f_mafia.exe	89
PID 1712 wrote to memory of 4448	1712	2024-03-26_3c3d294c38086908dc7099b6a966e91f_mafia.exe	89

C:\Users\Admin\AppData\Local\Temp\2024-03-26_3c3d294c38086908dc7099b6a966e91f_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-26_3c3d294c38086908dc7099b6a966e91f_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1712
- C:\Users\Admin\AppData\Local\Temp\4229.tmp
  "C:\Users\Admin\AppData\Local\Temp\4229.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-26_3c3d294c38086908dc7099b6a966e91f_mafia.exe E92007452C814902FA829DB78B639498D97CAA5DE7053BB481CBA453D5D73AF0877F7AC537EB4F0E284F219C114ED3970E233FC3D67D7264342A75858962F56F
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4448

C:\Users\Admin\AppData\Local\Temp\4229.tmp

Filesize
479KB

MD5
8572e7c3160bf67a4a2fafd7f9ee3fe6

SHA1
baf2af17448bdeadaf133d3e60bccc601e01f9e6

SHA256
57f4a49c64ceb31f39d20cf2bbdb26e5408e7226a6eab8b92268b5a74aad2c56

SHA512
9dd92b84f6c8f8817e450ed085ae7b1d58775fa44143d1a2b5929f3f634d0d5ea9621018b8ee30f6989fa81a8beb4c16ebcfd9c505890cd068f3cfabc754d7e2

Download Submit