7aae6cedbee404b76e50517e0944b2bbc624722c223999390e0ef6bd8658512c

Analysis

max time kernel
93s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
11/04/2024, 06:45

Target

2024-04-11_e4114ab8fbca0b82510f3fd04184f22b_mafia.exe
Size

428KB
MD5

e4114ab8fbca0b82510f3fd04184f22b
SHA1

21cf5e75d685c014c994e6aa59e6979db415d87b
SHA256

7aae6cedbee404b76e50517e0944b2bbc624722c223999390e0ef6bd8658512c
SHA512

31fc3b95406569ab7f9a552b4587990d61e31fc4ad39ca2c0e707f74866a5594a98df734dfbb8a4fda5d8c7e07c4146a9e1912c7d597210727a2a7395fc93918
SSDEEP

6144:gVdvczEb7GUOpYWhNVynE/mFHR/XWvToqktvmZdufA6V/MLCnMohk+qHR:gZLolhNVyENTojFad4A62LUMUrqHR

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3868	2E53.tmp

Executes dropped EXE 1 IoCs

pid	Process
3868	2E53.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2868 wrote to memory of 3868	2868	2024-04-11_e4114ab8fbca0b82510f3fd04184f22b_mafia.exe	85
PID 2868 wrote to memory of 3868	2868	2024-04-11_e4114ab8fbca0b82510f3fd04184f22b_mafia.exe	85
PID 2868 wrote to memory of 3868	2868	2024-04-11_e4114ab8fbca0b82510f3fd04184f22b_mafia.exe	85

C:\Users\Admin\AppData\Local\Temp\2024-04-11_e4114ab8fbca0b82510f3fd04184f22b_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-11_e4114ab8fbca0b82510f3fd04184f22b_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2868
- C:\Users\Admin\AppData\Local\Temp\2E53.tmp
  "C:\Users\Admin\AppData\Local\Temp\2E53.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-04-11_e4114ab8fbca0b82510f3fd04184f22b_mafia.exe ACFF2A39D2C1233BE02DF69E7D1BC615BEB4215A59551BD90463E62505BEF466C2C6638A492CD217F5957008DF331D2AB0244B572A8CF7E7B5B2B5697CF20109
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3868

C:\Users\Admin\AppData\Local\Temp\2E53.tmp

Filesize
428KB

MD5
f092f2ede296b1b429d7c0720b5b3cbe

SHA1
a9356532a393046bda9f58732f747ccea9d32bf8

SHA256
bcef7818a9744c42cc43e6f0f1a1d7599c9a2e0ca2195bed0c32bc21fd1bad35

SHA512
5f181bee975377c8480a14ff787828cd25f0f1745178c4d4da17b2926b5c756c59cc2e81f96058aa42dce0fc43ce9a875b62281b7040ab96c2e7eb5b806311cb

Download Submit