6fb89eaa6e555f60f366a3f43847e13971af5dd36a7d0cd3f455de860b97cdd2

Analysis

max time kernel
121s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
17-04-2024 05:27

Target

2024-04-17_0b732e8d915a6e7e07c9fc7c2020936d_mafia.exe
Size

435KB
MD5

0b732e8d915a6e7e07c9fc7c2020936d
SHA1

fa252e97f5440cc6c9734e5c02c31fbdde210229
SHA256

6fb89eaa6e555f60f366a3f43847e13971af5dd36a7d0cd3f455de860b97cdd2
SHA512

7d1a957c1edce99773d4c562a80c1ded076423417f53926e63755bdc042f9155ae731cca4163ea97051d1a9d5b7d9ea5d785483dca1efb22a487ca35a95aa6e0
SSDEEP

12288:fd4x+ePixnXQjb1XgNea/A0rflVKAVGfwP:fd4x+ePixAjFgTbblVpa

Score

7^/10

Deletes itself 1 IoCs

pid	Process
1892	3400.tmp

Executes dropped EXE 1 IoCs

pid	Process
1892	3400.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 944 wrote to memory of 1892	944	2024-04-17_0b732e8d915a6e7e07c9fc7c2020936d_mafia.exe	82
PID 944 wrote to memory of 1892	944	2024-04-17_0b732e8d915a6e7e07c9fc7c2020936d_mafia.exe	82
PID 944 wrote to memory of 1892	944	2024-04-17_0b732e8d915a6e7e07c9fc7c2020936d_mafia.exe	82

C:\Users\Admin\AppData\Local\Temp\2024-04-17_0b732e8d915a6e7e07c9fc7c2020936d_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-17_0b732e8d915a6e7e07c9fc7c2020936d_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:944
- C:\Users\Admin\AppData\Local\Temp\3400.tmp
  "C:\Users\Admin\AppData\Local\Temp\3400.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-17_0b732e8d915a6e7e07c9fc7c2020936d_mafia.exe DC0FD94A4D48B5B2EFF06D23961106987A0EF72E39CB0B193CC911E9F578D05DF25772C01BF648C4AAED68B93B9922281E45D748CE578757B84FB17E11839E9E
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:1892

C:\Users\Admin\AppData\Local\Temp\3400.tmp

Filesize
435KB

MD5
1a4f5691fed4b7555f5ffbf7fa29aca0

SHA1
63f733e502e446215568293373fb7fc31e37674e

SHA256
8ced7eddc9bf422d408e4056871382d481cfeced1eff0b34648713b2b7fafc05

SHA512
63a5ea747bbecfce66eda2322af93f7d312c8f83f100c9bfbcba51f93408a5f118711f7a5913909a596168949cfafbddd618b159539f58dc2cd505ad6a472770

Download Submit