53ca384b882402576ff80f30b0a4dd247c51895a00206773b69234c6b4ab8c6e

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
22/04/2024, 15:30

Target

2024-04-22_41d4f96136be8c49a84532ef28d8016a_mafia.exe
Size

473KB
MD5

41d4f96136be8c49a84532ef28d8016a
SHA1

c5b58d59da1fc69fb4d562a1d0068832857cb800
SHA256

53ca384b882402576ff80f30b0a4dd247c51895a00206773b69234c6b4ab8c6e
SHA512

039921537380af50c5b2f2648d20c6e36a4c376bc197cb3661e6928bdc350861e6926384004d3ada3e1a8f5e71c562ab54395137935a04ad0e26ceda6e385c35
SSDEEP

12288:Nb4bZudi79Ln9pDBEoHx8Tq6cR9Snd07BrdmA0a:Nb4bcdkL3DBx8KaiL

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2240	2D0B.tmp

Executes dropped EXE 1 IoCs

pid	Process
2240	2D0B.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4292 wrote to memory of 2240	4292	2024-04-22_41d4f96136be8c49a84532ef28d8016a_mafia.exe	87
PID 4292 wrote to memory of 2240	4292	2024-04-22_41d4f96136be8c49a84532ef28d8016a_mafia.exe	87
PID 4292 wrote to memory of 2240	4292	2024-04-22_41d4f96136be8c49a84532ef28d8016a_mafia.exe	87

C:\Users\Admin\AppData\Local\Temp\2024-04-22_41d4f96136be8c49a84532ef28d8016a_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-22_41d4f96136be8c49a84532ef28d8016a_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4292
- C:\Users\Admin\AppData\Local\Temp\2D0B.tmp
  "C:\Users\Admin\AppData\Local\Temp\2D0B.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-22_41d4f96136be8c49a84532ef28d8016a_mafia.exe F3B5A686791614C121DFAB91A80F27A99270297AFC1CD3D30BD660119DA8E78185122A201170AB92DA48623BE9E9AFF8ADF59A0C6B1C7086546813A9CCFD1B81
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2240

C:\Users\Admin\AppData\Local\Temp\2D0B.tmp

Filesize
473KB

MD5
131ca3f325097bef447e0466f9b3988c

SHA1
54e2728cd06bf93d2dba7888c7cd740eb4e76c91

SHA256
b5d27089486113ca6a1a1bea59d77aebc3714514e899858e1f32a61ad6a97eeb

SHA512
67a7b201d7c21e0d65388bbf4bcee46e488ad379b03ffa78d067806c7158da7ecd89a8f430276cbc0afcc1cb44482eb4d55d31c15ac88002045695a6c7163706

Download Submit