d29744279cc35736a3b7c28042fc7e88d962fae78f5aa6ac665438cfd2e21dff

Analysis

max time kernel
136s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26-03-2024 16:35

Target

2024-03-26_54c7cee6829e94ee7d6869c176776818_mafia.exe
Size

384KB
MD5

54c7cee6829e94ee7d6869c176776818
SHA1

d08890ec70a882a605ed1f03f3342ae1dece80a3
SHA256

d29744279cc35736a3b7c28042fc7e88d962fae78f5aa6ac665438cfd2e21dff
SHA512

f177501f483ef1f72f80881955ca8579a411cea1864dd2dc194bc37d2629f5d8035eb37c61d02c61dde23f85d69a00370d4a61f900ba53fad6713c1bd78b0512
SSDEEP

6144:drxfv4co9ZL3GBGgjODxbf7hHegMBjEi5uVJQFFn68DlCeLZBnqL/cvnMKgXkPZ:Zm48gODxbzAFjENHOFn68JCe9BnqLgnb

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3372	48FF.tmp

Executes dropped EXE 1 IoCs

pid	Process
3372	48FF.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4088 wrote to memory of 3372	4088	2024-03-26_54c7cee6829e94ee7d6869c176776818_mafia.exe	84
PID 4088 wrote to memory of 3372	4088	2024-03-26_54c7cee6829e94ee7d6869c176776818_mafia.exe	84
PID 4088 wrote to memory of 3372	4088	2024-03-26_54c7cee6829e94ee7d6869c176776818_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-03-26_54c7cee6829e94ee7d6869c176776818_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-26_54c7cee6829e94ee7d6869c176776818_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4088
- C:\Users\Admin\AppData\Local\Temp\48FF.tmp
  "C:\Users\Admin\AppData\Local\Temp\48FF.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-03-26_54c7cee6829e94ee7d6869c176776818_mafia.exe C0CD2979A2DE2C44AFC42FB2D25AEB5F3ACC030683FECA26D9C82AD261349F02B4A7DCF20D8B6E222A0BD6F610F97D0C1290A6159682D2BD2760784BE0D94196
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3372

C:\Users\Admin\AppData\Local\Temp\48FF.tmp

Filesize
384KB

MD5
5f676f1db7c8e638face14ab7a038ccb

SHA1
0b44232f3610768c64914a62a92c8eaf864e4329

SHA256
15cc4587432d0a25c9e15b814f7b32d06aefde42b908175e8548c872a7320e3a

SHA512
c3eefca861be8ef9bc04dccc6feb3580acf080c05de6209f724c60129cddb78dbcc243c0fd4d1e8ff7070be8bcd714c9389a4c3e3f19e6a7c17efd4374fcfc66

Download Submit