e8ba9324c772f371e6dfeea5834989404af04f4d82d9e9e574e0602c1f6a699e

Analysis

max time kernel
147s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
19-04-2024 05:40

Target

2024-04-19_aaa4c02eeb24f391d7b544c74e1b7a9e_mafia.exe
Size

412KB
MD5

aaa4c02eeb24f391d7b544c74e1b7a9e
SHA1

5d1856a70633ae716fed28b50d4ba29c87e80504
SHA256

e8ba9324c772f371e6dfeea5834989404af04f4d82d9e9e574e0602c1f6a699e
SHA512

ec40d65ffb8179ce132bca1c8bde9591996929308a4a167e3002cc183e40d88be612b757c36e46975885119df454fa736da3ccf40470d59200216a33e1ecb3f1
SSDEEP

6144:UooTAQjKG3wDGAeIc9kphIoDZnFHVsPWBeGs3+e3sPH43G0bCwzeu/DvyWqYlsxL:U6PCrIc9kph5qO+H38DbwzTrvJsw89

Score

7^/10

Deletes itself 1 IoCs

pid	Process
5044	5A64.tmp

Executes dropped EXE 1 IoCs

pid	Process
5044	5A64.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5104 wrote to memory of 5044	5104	2024-04-19_aaa4c02eeb24f391d7b544c74e1b7a9e_mafia.exe	84
PID 5104 wrote to memory of 5044	5104	2024-04-19_aaa4c02eeb24f391d7b544c74e1b7a9e_mafia.exe	84
PID 5104 wrote to memory of 5044	5104	2024-04-19_aaa4c02eeb24f391d7b544c74e1b7a9e_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-04-19_aaa4c02eeb24f391d7b544c74e1b7a9e_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-19_aaa4c02eeb24f391d7b544c74e1b7a9e_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5104
- C:\Users\Admin\AppData\Local\Temp\5A64.tmp
  "C:\Users\Admin\AppData\Local\Temp\5A64.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-04-19_aaa4c02eeb24f391d7b544c74e1b7a9e_mafia.exe 56D935AB2A27D8AF8135EE743E1BF1600FE2CF0D343ED0C679E28F1AD376DA0A72CF862AC93DA6834F6683EA920746E28FB86BC25F8623A706A4B96EA538B707
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:5044

C:\Users\Admin\AppData\Local\Temp\5A64.tmp

Filesize
412KB

MD5
2cfbc411c22efb4014923573eec64b7b

SHA1
9c64bb0ae1e40a8ab4ebfe4779327bd77fc7d54a

SHA256
4b4a0f20436a5e739dbd0771d11c94831fe11e00e460a8903cb0aca8137861e8

SHA512
96b3a2a047d2dc688e506d37e7b7560320aa54066cbebe69955bb63ce4cbc413646e23e789086a2a9eb7c9d74a640b10f9a7162729b773f351b864b80b544735

Download Submit