552667404bc2b49578951c3ae8499f5ae13ede3f53392483ac0fcb4e7aab0d54

Analysis

max time kernel
90s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06/04/2024, 12:54

Target

2024-04-06_f30bf47900eb562aa4c8c9cbeab7b650_mafia.exe
Size

476KB
MD5

f30bf47900eb562aa4c8c9cbeab7b650
SHA1

dd8de92639f655f5bc2a3da3f7ef0a9c8da1c10a
SHA256

552667404bc2b49578951c3ae8499f5ae13ede3f53392483ac0fcb4e7aab0d54
SHA512

c5540d4da4bf33c6459f33c2bda2cb1333404a310220b7f9050a119ee35e2244d1ba5491d340e7a968df340c01687e8c52ae1617c028c09542ff648bbd2b932f
SSDEEP

12288:aO4rfItL8HRkwChaSbNdBpAx1LYaSBfHTn7K9wlsDpVFd:aO4rQtGRkXhFbNOLka0+9wlsDpVFd

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4828	68CC.tmp

Executes dropped EXE 1 IoCs

pid	Process
4828	68CC.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4144 wrote to memory of 4828	4144	2024-04-06_f30bf47900eb562aa4c8c9cbeab7b650_mafia.exe	84
PID 4144 wrote to memory of 4828	4144	2024-04-06_f30bf47900eb562aa4c8c9cbeab7b650_mafia.exe	84
PID 4144 wrote to memory of 4828	4144	2024-04-06_f30bf47900eb562aa4c8c9cbeab7b650_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-04-06_f30bf47900eb562aa4c8c9cbeab7b650_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-06_f30bf47900eb562aa4c8c9cbeab7b650_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4144
- C:\Users\Admin\AppData\Local\Temp\68CC.tmp
  "C:\Users\Admin\AppData\Local\Temp\68CC.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-06_f30bf47900eb562aa4c8c9cbeab7b650_mafia.exe 0B6CF0EC50FFBE5B6C120FA60C8F8427B3B50BCB038B142F48D29463838ED512530F9884DE5B9BD170561F8B6B6AF845079C4A7CFDBF75B49F81D110AC0A9BC9
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4828

C:\Users\Admin\AppData\Local\Temp\68CC.tmp

Filesize
476KB

MD5
94efc86d691b87b41d90637dfb25c8eb

SHA1
517a00016d3c15053af5d4a98f9adc2cadf155a6

SHA256
ec69b678ad9bce25b86906aeaa90f9f93ac59297156dd520db1151b4b5f366c6

SHA512
1101d5061d375de8150ec1d92c7001cb8c60c0536e7761b42feef142447a6a17b78e283c14cbcb9e61f3c23d99cc2229204ea11d7f85468fb726f762596679ba

Download Submit