ed4e93f06aab7051c4618961133d6e405a39b5bea2416374d21770f3a4988a65

Analysis

max time kernel
90s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
06/04/2024, 02:29

Target

2024-04-06_28116b9f74cdb37f67193d860786398a_mafia.exe
Size

433KB
MD5

28116b9f74cdb37f67193d860786398a
SHA1

0ca1a4954a7ad1aaa55c27105dd93ffc582c5c9f
SHA256

ed4e93f06aab7051c4618961133d6e405a39b5bea2416374d21770f3a4988a65
SHA512

9c51e7362527544eff89cfde71f665ef118672ee18bcb8107d5001fda87854a04f5b66ec024c7c5b495154d262f687ff71418498d81b9ef407e8457c86ea71bb
SSDEEP

12288:Ci4g+yU+0pAiv+xL1+hB90J0p4ZAqF3vl0OKVcsn:Ci4gXn0pD+xL1+hB9gZACKrc8

Score

7^/10

Deletes itself 1 IoCs

pid	Process
1556	40B2.tmp

Executes dropped EXE 1 IoCs

pid	Process
1556	40B2.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4796 wrote to memory of 1556	4796	2024-04-06_28116b9f74cdb37f67193d860786398a_mafia.exe	85
PID 4796 wrote to memory of 1556	4796	2024-04-06_28116b9f74cdb37f67193d860786398a_mafia.exe	85
PID 4796 wrote to memory of 1556	4796	2024-04-06_28116b9f74cdb37f67193d860786398a_mafia.exe	85

C:\Users\Admin\AppData\Local\Temp\2024-04-06_28116b9f74cdb37f67193d860786398a_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-06_28116b9f74cdb37f67193d860786398a_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4796
- C:\Users\Admin\AppData\Local\Temp\40B2.tmp
  "C:\Users\Admin\AppData\Local\Temp\40B2.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-06_28116b9f74cdb37f67193d860786398a_mafia.exe DA6A32B7892A561AFE993C5189E7F884541E06C19AB2DA143840E4BF9A44C79DD5D790CDAD58C25A9B6934AB3FA40FAF50C9F1E4B1856DEDDE8930C8ECE60B4B
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:1556

C:\Users\Admin\AppData\Local\Temp\40B2.tmp

Filesize
433KB

MD5
4db7cfe2c2c343e6922257a3978645bd

SHA1
407d0bf1cd7749f069ba50e739877482133814fc

SHA256
56d099f37607d7661dd5974aafd524a4b819fc0288f0b9522eb303ec3b81de6f

SHA512
26391b9dfd199c9abe0e28fa0dd8b57594ad2f6afb72f10a0727cbbf25cb4be99e70af438887f54bf86ce4c592d81353acdb3eb5554999e1188f98bbe8252824

Download Submit