5ec45048e85979289a4502d43ec7adb335fffe5ac0924b2272bc9201803bd0c2

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
11-04-2024 01:59

Target

2024-04-11_e3c83113875028bb2c8df155055529f2_mafia.exe
Size

486KB
MD5

e3c83113875028bb2c8df155055529f2
SHA1

d81a5c80d03c8e11cd6c89a229b004374b182a62
SHA256

5ec45048e85979289a4502d43ec7adb335fffe5ac0924b2272bc9201803bd0c2
SHA512

c50203541559ec8dffe779e8de570ce3fe4df0e522613a20c7a6006542eb12121a302993d26f4f86b1ccc1b47d56adb05694bd78b52e8b28a09c628984811daa
SSDEEP

12288:3O4rfItL8HPktyMouUQQnC894OYQR47rKxUYXhW:3O4rQtGPk47uJQnCurm3KxUYXhW

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3160	5237.tmp

Executes dropped EXE 1 IoCs

pid	Process
3160	5237.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2348 wrote to memory of 3160	2348	2024-04-11_e3c83113875028bb2c8df155055529f2_mafia.exe	84
PID 2348 wrote to memory of 3160	2348	2024-04-11_e3c83113875028bb2c8df155055529f2_mafia.exe	84
PID 2348 wrote to memory of 3160	2348	2024-04-11_e3c83113875028bb2c8df155055529f2_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-04-11_e3c83113875028bb2c8df155055529f2_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-11_e3c83113875028bb2c8df155055529f2_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2348
- C:\Users\Admin\AppData\Local\Temp\5237.tmp
  "C:\Users\Admin\AppData\Local\Temp\5237.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-11_e3c83113875028bb2c8df155055529f2_mafia.exe 3C5925301D3B71D4FF37A225E862423F6E57ABDA329940D8B44DFF3414D7ECB30BD023AE1ADEE507EF54AC6D77C57EE785EBBA631D1811816B7307F19BFA709B
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3160

C:\Users\Admin\AppData\Local\Temp\5237.tmp

Filesize
486KB

MD5
40b90e19d029d9284a45e893dabcd75a

SHA1
31d23eeff9478b6698e42ead01cd26493353d9a8

SHA256
8f53740b649f53c74a4f73d509fb346453fc3142b7604027cd6d9ed584e2cdb4

SHA512
06ef8d39063e6903db4da85bd57ee970d864b28e056f2af80ca9ca22e2e94de7e19d30d1f9b0161b23a37ec34d86573294a5332387596b4d77258348d66d165a

Download Submit