7c74699fa18afacbea5f1e07d8ce0fb5ab8352c44ad5873e30f7360dad69513d

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
26/03/2024, 07:42

Target

2024-03-26_c93e28490a7c8a95e8d3930e24962a97_mafia.exe
Size

444KB
MD5

c93e28490a7c8a95e8d3930e24962a97
SHA1

9395044f18970cf2213f231a00c9ec1a22bf9f56
SHA256

7c74699fa18afacbea5f1e07d8ce0fb5ab8352c44ad5873e30f7360dad69513d
SHA512

0924a4639c68319bf296fb49a14b01855cde36237e30f0fb609388092788d7bbcbf7dee53401f57e83e186a147a8b4540f2f0f0e8ecef4eb53a2e74cdd682d7a
SSDEEP

6144:fFrJxvldL4c5ONK1xgWbd1s79+iStk4VOksjn3oEbrsHV3nWJ0oH39JtcP/08kHh:Nb4bZudi79Laos3WSoX9Ctkt54s0XZA

Score

7^/10

Deletes itself 1 IoCs

pid	Process
624	4527.tmp

Executes dropped EXE 1 IoCs

pid	Process
624	4527.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1532 wrote to memory of 624	1532	2024-03-26_c93e28490a7c8a95e8d3930e24962a97_mafia.exe	90
PID 1532 wrote to memory of 624	1532	2024-03-26_c93e28490a7c8a95e8d3930e24962a97_mafia.exe	90
PID 1532 wrote to memory of 624	1532	2024-03-26_c93e28490a7c8a95e8d3930e24962a97_mafia.exe	90

C:\Users\Admin\AppData\Local\Temp\2024-03-26_c93e28490a7c8a95e8d3930e24962a97_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-26_c93e28490a7c8a95e8d3930e24962a97_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1532
- C:\Users\Admin\AppData\Local\Temp\4527.tmp
  "C:\Users\Admin\AppData\Local\Temp\4527.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-03-26_c93e28490a7c8a95e8d3930e24962a97_mafia.exe D39AC62FA070546B097C2288A7D3D3C6D6A621CD226C4BC76D0B45286544E16FDA96BA26E284823054A851D79A10E66C87AAA6C154BAB419B0F8F595C6F15BF5
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:624

C:\Users\Admin\AppData\Local\Temp\4527.tmp

Filesize
444KB

MD5
808281e4d081bf7bde1326e609671133

SHA1
5855b3a98da05092eb856cca68defa630fbe07c2

SHA256
6f285015dcd664b9c74a2a4e3a12e8dc2cf3322fa976dfcfd1b48cd0d3307734

SHA512
58c748da2c63b50c25b07104740a957971bcc76d5e9efdeb625d7337e58f53b0a297068d9bd4d35ffbba2915ad11a6bf79c50cb39723d5e24c74e81a069cf9cd

Download Submit