09d086882a2e15996aaa9398402cc8d0cd1b02cd902508ee569bb5685911cb23

Analysis

max time kernel
92s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06/04/2024, 06:47

Target

2024-04-06_f8991cdf3f763bf20f9f21a7847b0fd3_mafia.exe
Size

486KB
MD5

f8991cdf3f763bf20f9f21a7847b0fd3
SHA1

466fd9a542ad4e63f1f7831045d80cd0f077ecfa
SHA256

09d086882a2e15996aaa9398402cc8d0cd1b02cd902508ee569bb5685911cb23
SHA512

bc47fdbce89fac2f74acbeb60b146b5ec4eef4168b53137e2b6fa2ce376b9e883c86d532e31caecd7ac808f989a27de58987b01475f8a6b129d40bd172f082e7
SSDEEP

12288:3O4rfItL8HPl19pk8GE/HQutjM+TTZd7dfdfcN7rKxUYXhW:3O4rQtGPPPk8Iz+pd7diN3KxUYXhW

Score

7^/10

Deletes itself 1 IoCs

pid	Process
460	3A1B.tmp

Executes dropped EXE 1 IoCs

pid	Process
460	3A1B.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3100 wrote to memory of 460	3100	2024-04-06_f8991cdf3f763bf20f9f21a7847b0fd3_mafia.exe	85
PID 3100 wrote to memory of 460	3100	2024-04-06_f8991cdf3f763bf20f9f21a7847b0fd3_mafia.exe	85
PID 3100 wrote to memory of 460	3100	2024-04-06_f8991cdf3f763bf20f9f21a7847b0fd3_mafia.exe	85

C:\Users\Admin\AppData\Local\Temp\2024-04-06_f8991cdf3f763bf20f9f21a7847b0fd3_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-06_f8991cdf3f763bf20f9f21a7847b0fd3_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3100
- C:\Users\Admin\AppData\Local\Temp\3A1B.tmp
  "C:\Users\Admin\AppData\Local\Temp\3A1B.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-06_f8991cdf3f763bf20f9f21a7847b0fd3_mafia.exe DBDE64B691CF5DC9A2A3373CF9C1A736F6E5E6AD558AB1078259385AD931FA2CFE65535450E898CF0926B7E0556FE8FC59771373B9B038484B37ADC5B27C572D
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:460

C:\Users\Admin\AppData\Local\Temp\3A1B.tmp

Filesize
486KB

MD5
31dd26c8ebb7700f478c9a24c5c72424

SHA1
cbbe361380d8d58e1ed0a518ce663e64023017bb

SHA256
cd8c834958642c9053cce84a45efd059e7ecfe77fc48cbd8d2bd0337636c72b2

SHA512
ad149f5d60d462ea8ea8e206368820d8900c405cc758b9004a6b57117917cd000368b12db7499fd32c9c630e99f2bbb95d740ea6babe76e8caf88b7885cae473

Download Submit