c35ccbcf7e8137d9e60286b017e20536739cf835ccf02e0d976d5b5d2bbda4fd

Analysis

max time kernel
95s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
08/04/2024, 14:28

Target

2024-04-08_18ebbb7789b036d1654f2483758f9801_mafia.exe
Size

433KB
MD5

18ebbb7789b036d1654f2483758f9801
SHA1

10540dd1b6ac7e27b585afc1e99e042cd3d6606f
SHA256

c35ccbcf7e8137d9e60286b017e20536739cf835ccf02e0d976d5b5d2bbda4fd
SHA512

989a36ad3583d8985594bcf7308d7db3cb09b99ee5afe308d9eba08c32968cdd8108ca34e93655794bcd496f7feb90099e50c7c7229cbd7442e790bedf6a9095
SSDEEP

12288:Ci4g+yU+0pAiv+SX8pCygqAcXpnjT0SypW2n:Ci4gXn0pD+SMwyW0dj4bpWW

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3280	62E0.tmp

Executes dropped EXE 1 IoCs

pid	Process
3280	62E0.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2532 wrote to memory of 3280	2532	2024-04-08_18ebbb7789b036d1654f2483758f9801_mafia.exe	87
PID 2532 wrote to memory of 3280	2532	2024-04-08_18ebbb7789b036d1654f2483758f9801_mafia.exe	87
PID 2532 wrote to memory of 3280	2532	2024-04-08_18ebbb7789b036d1654f2483758f9801_mafia.exe	87

C:\Users\Admin\AppData\Local\Temp\2024-04-08_18ebbb7789b036d1654f2483758f9801_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-08_18ebbb7789b036d1654f2483758f9801_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2532
- C:\Users\Admin\AppData\Local\Temp\62E0.tmp
  "C:\Users\Admin\AppData\Local\Temp\62E0.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-08_18ebbb7789b036d1654f2483758f9801_mafia.exe 11316E387D5021CA1407B60AC29D4F42C3C0B2B3DE49D6545C326DEEF9163C882628423A92C76BB35AC384875ABBCDC4CF84B01961903B0B58EC423C990FDCDF
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3280

C:\Users\Admin\AppData\Local\Temp\62E0.tmp

Filesize
433KB

MD5
db68fdf373470b4821bc2729491362b9

SHA1
ff1761177c7af88ade8bb18804b651390a2ec280

SHA256
75274b152bd61e929a031495df5a45d560ed094354f0accd6b179ddfcdf5cf17

SHA512
7f493781457cffa4cf5025c71c0139660b8c491871ac7671c26f3ad14f9e201627b1e2c487c168391825082fd34211653551b4a5e073aa7e5d0108ebadbe9c70

Download Submit