ed3f3082b12451347bf115a673e3f591dad82fcad3d9cc7f7f6e09a38245afd2

Analysis

max time kernel
138s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
22/04/2024, 16:10

Target
2024-04-22_fd4eec2fd902add21cb60af4c0763708_mafia.exe
Size 435KB
Sample240422-tmekbadd5s
SHA256 ed3f3082b12451347bf115a673e3f591dad82fcad3d9cc7f7f6e09a38245afd2
MD5 fd4eec2fd902add21cb60af4c0763708
SHA1 908edc18af54c674209ca3ce734c47d398736548
SHA512 ac153f79fe02fda881f9aadc8a64e2455df6a1848e362327ec2859c37273963f16cf37ae627aba80ad3a9b8994cab7a51f4ff47c4c0b79fcda29b0ebd5fcc8df
SSDEEP 6144:fJvyW4ojUnQjx4qePix+qXQjBYy9enJVPDnleJSHoSFwaYs1y/fg0Q0UeOiCSiwP:fd4x+ePixnXQjMxlqSHFfag0ceOgiwP
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3324	40A3.tmp

Executes dropped EXE 1 IoCs

pid	Process
3324	40A3.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1940 wrote to memory of 3324	1940	2024-04-22_fd4eec2fd902add21cb60af4c0763708_mafia.exe	89
PID 1940 wrote to memory of 3324	1940	2024-04-22_fd4eec2fd902add21cb60af4c0763708_mafia.exe	89
PID 1940 wrote to memory of 3324	1940	2024-04-22_fd4eec2fd902add21cb60af4c0763708_mafia.exe	89

C:\Users\Admin\AppData\Local\Temp\2024-04-22_fd4eec2fd902add21cb60af4c0763708_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-22_fd4eec2fd902add21cb60af4c0763708_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1940
- C:\Users\Admin\AppData\Local\Temp\40A3.tmp
  "C:\Users\Admin\AppData\Local\Temp\40A3.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-04-22_fd4eec2fd902add21cb60af4c0763708_mafia.exe A6B75456EB69C247C91CD441A277039523629ABA7523EAB753C38D609745B2B4B2C4F6B1D363DB53B06663CAD04E3D8CE7C8C86853FC51564C54F81AF93F08EA
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3324

40A3.tmp

Path C:\Users\Admin\AppData\Local\Temp\40A3.tmp
Size 435KB
SHA256 cc90a9e7629489b49425dc71c2dbbe56b09843de637b617b4f10e937adec1a72
MD5 9f7f138c6111937d8d1cbd5d1c473ed6
SHA1 07c4bba3a310075fef63b02a7539bb7bef38f4b5
SHA512 4ea7c51f2a22651c26bee0d895c07f56e4e338cee1acef0fb1e5126202732e89e9cf64a89add7c0de257309aa8c03d53ac9b9f9e55713e78c2468d9959823f92
SSDEEP 12288:fd4x+ePixnXQjtbb0+BM7R8sU7zNcUn4wP:fd4x+ePixAjhbUdUx4
MD5 SHA1 SHA512 SSDEEP

Submit Download