08babed5ad9b607f104e6d022790daa34aecd8f8b4905ddf9851ece3b67e7a2f

Analysis

max time kernel
148s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
15/04/2024, 14:36

Target

2024-04-15_42d7bfca75240b2536e67b05f7c18966_mafia.exe
Size

412KB
MD5

42d7bfca75240b2536e67b05f7c18966
SHA1

8a2711e09d1feecdfdb3f9dd31761a5d2007bb78
SHA256

08babed5ad9b607f104e6d022790daa34aecd8f8b4905ddf9851ece3b67e7a2f
SHA512

ed94416227ae0292fc1bf5fa45be0eb44611e4d7bc7e6502458d64a8185d63ba7e9b79b394ce20ff8cf52ddc9b0139ac7995c4a2fc47c31563a7365a16594295
SSDEEP

6144:UooTAQjKG3wDGAeIc9kphIoDZnaTth1vok663q/x67AvIK2QzmWGHf9m+wP:U6PCrIc9kph5qtrok663i67EIMiIT

Score

7^/10

Deletes itself 1 IoCs

pid	Process
1892	4E01.tmp

Executes dropped EXE 1 IoCs

pid	Process
1892	4E01.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3936 wrote to memory of 1892	3936	2024-04-15_42d7bfca75240b2536e67b05f7c18966_mafia.exe	83
PID 3936 wrote to memory of 1892	3936	2024-04-15_42d7bfca75240b2536e67b05f7c18966_mafia.exe	83
PID 3936 wrote to memory of 1892	3936	2024-04-15_42d7bfca75240b2536e67b05f7c18966_mafia.exe	83

C:\Users\Admin\AppData\Local\Temp\2024-04-15_42d7bfca75240b2536e67b05f7c18966_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-15_42d7bfca75240b2536e67b05f7c18966_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3936
- C:\Users\Admin\AppData\Local\Temp\4E01.tmp
  "C:\Users\Admin\AppData\Local\Temp\4E01.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-04-15_42d7bfca75240b2536e67b05f7c18966_mafia.exe 1BACF4F42EC62AAA77CC625A75117CCD16FDDAB21B8A4C9D2270DB843A2350D886201FDFF7BF4AB308B0CE1F99822632D84E54B89E3010A45ADA4645A284D1E1
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:1892

C:\Users\Admin\AppData\Local\Temp\4E01.tmp

Filesize
412KB

MD5
f07d56a23907cc64e4cf5bade59d5c58

SHA1
d9eecdde5f6bcb314c6b98adf39c45b53787d410

SHA256
fb3d9828a3f67bd19d23d423c4d827aa202a52eccdadf3d9f6c871cc7400cbeb

SHA512
243c21def1a4189e6a08a6cbb9e620bb0a7955ecd1c5089a88ee270e80fe9b3477d3b339b7eef1c4909d1c830adbbdee88cd003097be6b4dbf9d93d5fccf08d2

Download Submit