6c5808d9e6ee8557495c10b9db0073d4701070cfa7deef76f339c265b2a668b3

Analysis

max time kernel
144s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
20/04/2024, 15:33

Target

2024-04-20_579b6b62cebb8afd97189bc3852c85d5_mafia.exe
Size

412KB
MD5

579b6b62cebb8afd97189bc3852c85d5
SHA1

b8a505880b1dbf8bdfb0a31ca9095180c14f5dbb
SHA256

6c5808d9e6ee8557495c10b9db0073d4701070cfa7deef76f339c265b2a668b3
SHA512

0f6e17fa358fea2ceb106843070db7c8c49460957dbb4c8accc2564d0e40bda7900eac7a6a0f83de56e79bd36f10644d08e2faf594753ce5149bcffd579c5f21
SSDEEP

6144:UooTAQjKG3wDGAeIc9kphIoDZn6Z7soZQIQa/vgp7Y9xiK1rMLrtGX5Oibktfh1S:U6PCrIc9kph5qIoxQb74h1rMntjVS

Score

7^/10

Deletes itself 1 IoCs

pid	Process
5000	3057.tmp

Executes dropped EXE 1 IoCs

pid	Process
5000	3057.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4216 wrote to memory of 5000	4216	2024-04-20_579b6b62cebb8afd97189bc3852c85d5_mafia.exe	86
PID 4216 wrote to memory of 5000	4216	2024-04-20_579b6b62cebb8afd97189bc3852c85d5_mafia.exe	86
PID 4216 wrote to memory of 5000	4216	2024-04-20_579b6b62cebb8afd97189bc3852c85d5_mafia.exe	86

C:\Users\Admin\AppData\Local\Temp\2024-04-20_579b6b62cebb8afd97189bc3852c85d5_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-20_579b6b62cebb8afd97189bc3852c85d5_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4216
- C:\Users\Admin\AppData\Local\Temp\3057.tmp
  "C:\Users\Admin\AppData\Local\Temp\3057.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-04-20_579b6b62cebb8afd97189bc3852c85d5_mafia.exe 27D215BAA4BF2118B9A3E18099520880CE55C26F8CFAD92F04F48801C981E158B1B6A4239C7BE44B55D3EC020302B9FF78713F6CDC216FA86182AB856CD695C3
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:5000

C:\Users\Admin\AppData\Local\Temp\3057.tmp

Filesize
412KB

MD5
61fdb11f196712849df9d42084d48495

SHA1
0c422d310d572ec7f08f85b36f636da6bdd7be72

SHA256
088654b3f755ae5d737a31918609c3ea2b2bb2d7663ee7e347ef49fa6d7e1b7c

SHA512
8683bccee450caf8f023ed7a53cee96e706aa486c090acf85230a934089746ebf5363a92d67d3e50b392f4b0bf3f55a2392c7e4386e6c77f55513233a508ff86

Download Submit