e0269a8b8b5c788b68f98968b032aff3386f57dd2b7ab8d1db2baabf508d0d52

Analysis

max time kernel
132s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
26-03-2024 03:40

Target

2024-03-26_58ea825c5fb9e87b0d0826019c8922a4_mafia.exe
Size

476KB
MD5

58ea825c5fb9e87b0d0826019c8922a4
SHA1

2f01890c2d1f3f5eda2a62b3d55afe4c3a949f02
SHA256

e0269a8b8b5c788b68f98968b032aff3386f57dd2b7ab8d1db2baabf508d0d52
SHA512

34eeef4f852568908d1fb18346ac5c909e4174a2aafcfb6816f4a46656b6fcad4adbd3d08a3ca08f5c0105f3b30801f9f4701c1f02f6bcaad60b58caadfb16c4
SSDEEP

12288:aO4rfItL8HRz0GJKpECb2wU9m3fcn7K9wlsDpVFd:aO4rQtGRz0UK2CbxUV+9wlsDpVFd

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2492	3604.tmp

Executes dropped EXE 1 IoCs

pid	Process
2492	3604.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4112 wrote to memory of 2492	4112	2024-03-26_58ea825c5fb9e87b0d0826019c8922a4_mafia.exe	88
PID 4112 wrote to memory of 2492	4112	2024-03-26_58ea825c5fb9e87b0d0826019c8922a4_mafia.exe	88
PID 4112 wrote to memory of 2492	4112	2024-03-26_58ea825c5fb9e87b0d0826019c8922a4_mafia.exe	88

C:\Users\Admin\AppData\Local\Temp\2024-03-26_58ea825c5fb9e87b0d0826019c8922a4_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-26_58ea825c5fb9e87b0d0826019c8922a4_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4112
- C:\Users\Admin\AppData\Local\Temp\3604.tmp
  "C:\Users\Admin\AppData\Local\Temp\3604.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-26_58ea825c5fb9e87b0d0826019c8922a4_mafia.exe 92F216ADDF439D59D985C664C05CD6616DB2DE0ECB0C16BCB66ABCEE7CB634D89B5A59C236B3E1988170DE881FF2C0B890322516A7420D9F80177063873BEE0E
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2492

C:\Users\Admin\AppData\Local\Temp\3604.tmp

Filesize
476KB

MD5
2fa67951edbab89306383a1a6378909a

SHA1
d43dc15fb5be374e393a2c731113140ba3dde339

SHA256
ae79ef0dab573786e29172f582fc3f14d0841ba575b88991dd1641ee1671d9a4

SHA512
e2e84f45c81e58418bef858f179581530893a911f45d396f27c769c69bba8c8ef66b307ad9a8e42239075a4de718dbaa26c427b0a586d8c74eef325a345b8c59

Download Submit