d5eac423d449fb3eea370f21968c29b4ef627c6fd71cd5bc21b77d0f426b7a3b

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
05/04/2024, 19:40

Target
2024-04-05_ba80acca05dfe41e5f45e24145611543_mafia.exe
Size 412KB
Sample240405-ydhb3acf44
SHA256 d5eac423d449fb3eea370f21968c29b4ef627c6fd71cd5bc21b77d0f426b7a3b
MD5 ba80acca05dfe41e5f45e24145611543
SHA1 472ec5a649fb37ffeb077af173b3650cf3a2abdf
SHA512 2a02b26171a46dcd5f33c01acfca4d9fac891bc809b08b80386a4a053e2b800d0d25a281607b8c96e5950e0419fcd075e36726364e2fb71d0155a2dbc477feba
SSDEEP 12288:U6PCrIc9kph5X6NE2gztjwKvRr69DqU7Q2e0SQ0h:U6QIcOh5X0aztjwsr69eUUb20
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2892	36DF.tmp

Executes dropped EXE 1 IoCs

pid	Process
2892	36DF.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4896 wrote to memory of 2892	4896	2024-04-05_ba80acca05dfe41e5f45e24145611543_mafia.exe	85
PID 4896 wrote to memory of 2892	4896	2024-04-05_ba80acca05dfe41e5f45e24145611543_mafia.exe	85
PID 4896 wrote to memory of 2892	4896	2024-04-05_ba80acca05dfe41e5f45e24145611543_mafia.exe	85

C:\Users\Admin\AppData\Local\Temp\2024-04-05_ba80acca05dfe41e5f45e24145611543_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-05_ba80acca05dfe41e5f45e24145611543_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4896
- C:\Users\Admin\AppData\Local\Temp\36DF.tmp
  "C:\Users\Admin\AppData\Local\Temp\36DF.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-04-05_ba80acca05dfe41e5f45e24145611543_mafia.exe 52BF7B34D82D8246F097D3B592CE9D2C9E980D888E03DA67DA0927D0210973976780779BFD9093232C4341FDA15DD79CD29D9381C7F434442EA6CF1D9800E193
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2892

36DF.tmp

Path C:\Users\Admin\AppData\Local\Temp\36DF.tmp
Size 412KB
SHA256 34c5a15c5fa1ec46bf9d300edf960c0a2ccf4c7f160c0cbff4bbc7fa83034e65
MD5 48e0cf9d5dc7a044616035db5c74d4a9
SHA1 a00f20c40da9b530c4847bdf460a589a26fd5732
SHA512 8aa7a92a210d9fa38f497f17697b91ac774cef5fc0c0e7eea78ac7c38777cfae9469be67e401f91866548ec8652d35746c9c41f078740b4dab3f2f57d39bd494
SSDEEP 6144:UooTAQjKG3wDGAeIc9kphIoDZnIziq132shFwaZ7/HHH6QZcOFNlE/bP:U6PCrIc9kph5M2sQaZ/HHHvcODly
MD5 SHA1 SHA512 SSDEEP

Submit Download