04da44ecd8b37b1fc4ecfe49b4afa8f1be5efcf69f3d0fbb0c6468bfba50a911

Analysis

max time kernel
150s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
20-04-2024 21:33

Target

2024-04-20_81f6cf83fa3744176c46bb1e93194391_mafia.exe
Size

411KB
MD5

81f6cf83fa3744176c46bb1e93194391
SHA1

8373b68e1a2b1a805b6de1da7213cbf77a1f8252
SHA256

04da44ecd8b37b1fc4ecfe49b4afa8f1be5efcf69f3d0fbb0c6468bfba50a911
SHA512

91953e09a0199f680317de8b1ce45e7e93b43cd93dd456723c8039f87ca9fa00fc76d7055ec352f9a081c59a2ecfa760f7b6e2699101215184075fa118982626
SSDEEP

6144:gVdvczEb7GUOpYWhNVynE/mFyd+EXJcW19qieTYiDwpzHqHI:gZLolhNVyEplZcuYie8iDwpzqHI

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3260	3808.tmp

Executes dropped EXE 1 IoCs

pid	Process
3260	3808.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5020 wrote to memory of 3260	5020	2024-04-20_81f6cf83fa3744176c46bb1e93194391_mafia.exe	84
PID 5020 wrote to memory of 3260	5020	2024-04-20_81f6cf83fa3744176c46bb1e93194391_mafia.exe	84
PID 5020 wrote to memory of 3260	5020	2024-04-20_81f6cf83fa3744176c46bb1e93194391_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-04-20_81f6cf83fa3744176c46bb1e93194391_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-20_81f6cf83fa3744176c46bb1e93194391_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5020
- C:\Users\Admin\AppData\Local\Temp\3808.tmp
  "C:\Users\Admin\AppData\Local\Temp\3808.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-04-20_81f6cf83fa3744176c46bb1e93194391_mafia.exe A51ADC5F6C0E10AAA529279B05F6927E61A35ECDF0A5D24EA8436159AD2A508EE2F422AE4AB6BB19410A58C5425CEFE732B307678F3441E284A30EAA80EB80FD
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3260

C:\Users\Admin\AppData\Local\Temp\3808.tmp

Filesize
411KB

MD5
7fafb1e82166f443657bd9611b1f7032

SHA1
e3c7b99cfc58b1c84c0d3780d24096bbb3481693

SHA256
959f060076bddcfc463f3747f9c17c1187d5e85eb2174bc6d10c74a323137e59

SHA512
09b0b1898e800a5043b1f5abd3b658da0989b3ca030b716e6b43b2988725354bd245f76f92798984921a3ed37627a664d96e6e911c3a4236882ba39e50cc26be

Download Submit