afc3948697b9112747b2b812c305170336bf9d9d4772a6e5a9924deb69a3dbc5

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
19-04-2024 04:31

Target

2024-04-19_54af8b17364b60723d3ecffef3dcff8d_mafia.exe
Size

526KB
MD5

54af8b17364b60723d3ecffef3dcff8d
SHA1

801c65f15338cd73294b8d8d45b6cc8d94a03ac4
SHA256

afc3948697b9112747b2b812c305170336bf9d9d4772a6e5a9924deb69a3dbc5
SHA512

9118ef95a7a89a9b084f56ee6599a4952ba32a5096f6bfe9ff9660a3828621198bc0657ec9c32f19cad59e58e070722b5142e8b1cb97f31038c401cf9f437320
SSDEEP

6144:zooTAQjKG3wDGAeIc9kphIoDZnYxdFJeN9me5pevPTgY9z8z38rG+d+Ca8kfafPz:z6PCrIc9kph5I+NcenOnm78Rara3z

Score

7^/10

Deletes itself 1 IoCs

pid	Process
1416	3E41.tmp

Executes dropped EXE 1 IoCs

pid	Process
1416	3E41.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4012 wrote to memory of 1416	4012	2024-04-19_54af8b17364b60723d3ecffef3dcff8d_mafia.exe	84
PID 4012 wrote to memory of 1416	4012	2024-04-19_54af8b17364b60723d3ecffef3dcff8d_mafia.exe	84
PID 4012 wrote to memory of 1416	4012	2024-04-19_54af8b17364b60723d3ecffef3dcff8d_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-04-19_54af8b17364b60723d3ecffef3dcff8d_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-19_54af8b17364b60723d3ecffef3dcff8d_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4012
- C:\Users\Admin\AppData\Local\Temp\3E41.tmp
  "C:\Users\Admin\AppData\Local\Temp\3E41.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-04-19_54af8b17364b60723d3ecffef3dcff8d_mafia.exe 1C1071DDD0DAD8E4499294E7D746B05D3A0749EA932221B2A3C5854C2570CE9299EEE19A317BA4F10C4B1F0B834CA6BB4149E3B54C280CA2F9B7E708DABA25EB
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:1416

C:\Users\Admin\AppData\Local\Temp\3E41.tmp

Filesize
526KB

MD5
5162fcd6cd3c22d1d4f6266de40d51dd

SHA1
4fed59a9f79598dd01d53b06b8b132eb23fe1f0a

SHA256
a620ce5fce4033cad1991712c6b260e82d4168bdda2a31e8790f504d5cd546a3

SHA512
27188d2d1b1e62aae52335e9cc6c71dfd4fb41e5096a804d7bbc01f910f78138c9ad173b1501c8bcb0671487e7155960772bf31a20fdd8ee1c5c72eb9446af4b

Download Submit