5c55d10a7c72db3e7f8e4a5a38a13584d724bb47b12875a30074aecca5a447f7

Analysis

max time kernel
143s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
11/04/2024, 08:49

Target

2024-04-11_90c46b5d062b1f52e76f1ec810db652e_mafia.exe
Size

411KB
MD5

90c46b5d062b1f52e76f1ec810db652e
SHA1

19cc0c9422dd369952784277faabdb28fe1dd19b
SHA256

5c55d10a7c72db3e7f8e4a5a38a13584d724bb47b12875a30074aecca5a447f7
SHA512

5b8b4bcb5dc6e3d3098b1be6bbdb36cd812c7a22e718e843c65d766220442259978b4456791d6f4919c696078a6663b61f050ff14413a17082971cf0ea2889eb
SSDEEP

6144:gVdvczEb7GUOpYWhNVynE/mF3Xds27FeWeieTuuBA5kzeNDqH:gZLolhNVyEaXHFeouBA66NDqH

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3112	153.tmp

Executes dropped EXE 1 IoCs

pid	Process
3112	153.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 636 wrote to memory of 3112	636	2024-04-11_90c46b5d062b1f52e76f1ec810db652e_mafia.exe	91
PID 636 wrote to memory of 3112	636	2024-04-11_90c46b5d062b1f52e76f1ec810db652e_mafia.exe	91
PID 636 wrote to memory of 3112	636	2024-04-11_90c46b5d062b1f52e76f1ec810db652e_mafia.exe	91

C:\Users\Admin\AppData\Local\Temp\2024-04-11_90c46b5d062b1f52e76f1ec810db652e_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-11_90c46b5d062b1f52e76f1ec810db652e_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:636
- C:\Users\Admin\AppData\Local\Temp\153.tmp
  "C:\Users\Admin\AppData\Local\Temp\153.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-04-11_90c46b5d062b1f52e76f1ec810db652e_mafia.exe 68B4AEDABE4E68A9FB57114D3F38764AF664F903FEB5EC2C9F4AC81BD70506A9BF1648282C8ABF26B3E62F4A154908224786503B0B4394ECAFFA1C31950974FC
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3704 --field-trial-handle=2252,i,16022092570067181109,3235558581947505669,262144 --variations-seed-version /prefetch:8
1⤵
PID:4500

C:\Users\Admin\AppData\Local\Temp\153.tmp

Filesize
411KB

MD5
8469d0855cf99a9fbb117592d8b3a201

SHA1
9f237471e7e6ac940963b39fd992a6d3b0ca31e9

SHA256
83c07baa1506f17e135e04d7554e8605f2187b72e66831382999c330e852e54c

SHA512
a203941693ce1a6a6ecddc5dc9addcec9cb11399506a3b456cb65f3ab677ffac69109285aa64fa3f08a3f83119b3fbf14d1131673afa0750266e714d6df804ee

Download Submit