1b07d9c8e985f09fa6aed4c22cf37e4b656782285afa097dc349e454143d7314

Analysis

max time kernel
92s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
09-04-2024 04:00

Target

2024-04-09_76f9c7c9cc8d058c19fc85795a2a01a3_mafia.exe
Size

479KB
MD5

76f9c7c9cc8d058c19fc85795a2a01a3
SHA1

b55bebdc56168a1b5e68285ef7b8f6cb3b3e549e
SHA256

1b07d9c8e985f09fa6aed4c22cf37e4b656782285afa097dc349e454143d7314
SHA512

9f99c2fb576041960b68de20d41d070018e02fb7ba3ab77ca18a524c6c9c51eab7a2c79db445414bad9d8c96b1d4d8f8b639207f57f55657f7eaadc0b1f92c4f
SSDEEP

12288:bO4rfItL8HAmGpemw2S+7+7OQzBy5oy21L77tc1A75UO:bO4rQtGAmGpA2S+7QOQzBLy+vtgAVUO

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2708	3B82.tmp

Executes dropped EXE 1 IoCs

pid	Process
2708	3B82.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2280 wrote to memory of 2708	2280	2024-04-09_76f9c7c9cc8d058c19fc85795a2a01a3_mafia.exe	86
PID 2280 wrote to memory of 2708	2280	2024-04-09_76f9c7c9cc8d058c19fc85795a2a01a3_mafia.exe	86
PID 2280 wrote to memory of 2708	2280	2024-04-09_76f9c7c9cc8d058c19fc85795a2a01a3_mafia.exe	86

C:\Users\Admin\AppData\Local\Temp\2024-04-09_76f9c7c9cc8d058c19fc85795a2a01a3_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-09_76f9c7c9cc8d058c19fc85795a2a01a3_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2280
- C:\Users\Admin\AppData\Local\Temp\3B82.tmp
  "C:\Users\Admin\AppData\Local\Temp\3B82.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-09_76f9c7c9cc8d058c19fc85795a2a01a3_mafia.exe C61F545AE5ED2F3E742B39EBF39FE66C254C5CC1B8CB928ACDFC78E71EC5B90B1B8760FC2AA5F109FB89DECD0ABE85B5B69F373853473CF9DDCC8F862B5A473A
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2708

C:\Users\Admin\AppData\Local\Temp\3B82.tmp

Filesize
479KB

MD5
1c0771a06babd588e124953d724dabeb

SHA1
5024ed9bd4ae7f59081ac6015a631e78eb60e7f5

SHA256
089d1d15a80ae6d6ea1e5621ddb88376561320de458e4316fcc86f09494f95cb

SHA512
efee3eba850499f7de81f595c9933f4731ad797ba160718de4f51408f1ff11c9e1f759d8a8a75205cc953ae58e5abb0acb9bf565fafd5bf95d309213d861bdaa

Download Submit