fc96e3b3be87fd24a4b86f74174d76cec8341acb9e2f5921af6f7e8c5555c0a2

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
28/03/2024, 08:42

Target

2024-03-28_75ae4f8cfb92ba36217e76f10a2aa0df_mafia.exe
Size

428KB
MD5

75ae4f8cfb92ba36217e76f10a2aa0df
SHA1

5372e88e9754e906b522b305a8bacfd7a3b91598
SHA256

fc96e3b3be87fd24a4b86f74174d76cec8341acb9e2f5921af6f7e8c5555c0a2
SHA512

004977bcf9a3044b3766c768765c0a6cc04edcaa7b3e0f31db5fa628c1b1f9333a7ba2bf5365acbbba0415de4b456fbd5fd8a839d7784efd3fa4cf4164539621
SSDEEP

6144:gVdvczEb7GUOpYWhNVynE/mF1HG4hs/rUNQ/7XqfaaaqHR:gZLolhNVyEB4a/EzaqHR

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3640	4546.tmp

Executes dropped EXE 1 IoCs

pid	Process
3640	4546.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1720 wrote to memory of 3640	1720	2024-03-28_75ae4f8cfb92ba36217e76f10a2aa0df_mafia.exe	88
PID 1720 wrote to memory of 3640	1720	2024-03-28_75ae4f8cfb92ba36217e76f10a2aa0df_mafia.exe	88
PID 1720 wrote to memory of 3640	1720	2024-03-28_75ae4f8cfb92ba36217e76f10a2aa0df_mafia.exe	88

C:\Users\Admin\AppData\Local\Temp\2024-03-28_75ae4f8cfb92ba36217e76f10a2aa0df_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-28_75ae4f8cfb92ba36217e76f10a2aa0df_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1720
- C:\Users\Admin\AppData\Local\Temp\4546.tmp
  "C:\Users\Admin\AppData\Local\Temp\4546.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-03-28_75ae4f8cfb92ba36217e76f10a2aa0df_mafia.exe 445EC0C32834294212C81BB350132E03B5D8F4AA8BA27C89C6ED67A0C3E1FFB997B330A2F6F600D08843FDA052EF00408E0D45367A7061AB8409C20D93BC6A40
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3640

C:\Users\Admin\AppData\Local\Temp\4546.tmp

Filesize
428KB

MD5
3cf53a340a19133deb6071ac51496f4d

SHA1
1d809d8b65fe44662e0fe4be42b8f4f7ccb83294

SHA256
2996e48518a3acb0aecccf0148773fde1889f828d0f910b7ead7789a0f018880

SHA512
06fc0bf0b489ce9557e2f8f439dc7e699a04efbb17adbf100be8a507e91a711fc553f79a3b988304253986bdcaff3235191cb8580301b3052a17fb6f7136f053

Download Submit