3c9fbf31e37dfdd4772c029410ff4935b7c121c177aa025505694c4dab7df85d

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
23/04/2024, 07:49

Target

2024-04-23_eafcea5a0efef5838685335741c66c44_mafia.exe
Size

384KB
MD5

eafcea5a0efef5838685335741c66c44
SHA1

83cd81e009cb2a3f7f5e331918bb9101406de870
SHA256

3c9fbf31e37dfdd4772c029410ff4935b7c121c177aa025505694c4dab7df85d
SHA512

8bb932324c8150fd665e184a5a65b0d817ee7110aca54b3c2a5666e10d070c0cda959bfb25dca8c340333ea2d1b299466dec3506ee841c46ca7c16b5bb3ead3a
SSDEEP

6144:drxfv4co9ZL3GBGgjODxbf7hHAvrZeSu85y1RxDEIW1bvIMBtbw6Z:Zm48gODxbz65wA1bAU3Z

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4068	6CF2.tmp

Executes dropped EXE 1 IoCs

pid	Process
4068	6CF2.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2636 wrote to memory of 4068	2636	2024-04-23_eafcea5a0efef5838685335741c66c44_mafia.exe	87
PID 2636 wrote to memory of 4068	2636	2024-04-23_eafcea5a0efef5838685335741c66c44_mafia.exe	87
PID 2636 wrote to memory of 4068	2636	2024-04-23_eafcea5a0efef5838685335741c66c44_mafia.exe	87

C:\Users\Admin\AppData\Local\Temp\2024-04-23_eafcea5a0efef5838685335741c66c44_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-23_eafcea5a0efef5838685335741c66c44_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2636
- C:\Users\Admin\AppData\Local\Temp\6CF2.tmp
  "C:\Users\Admin\AppData\Local\Temp\6CF2.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-04-23_eafcea5a0efef5838685335741c66c44_mafia.exe 4626A172D99AB1DA4B5451A27A92819E20E53CC7F3038AEC9D4E2B1A1B18CC3DE017897B320574C47BBE95466766461F7F8E5B5F8D54640FB73F1ACCEC73DDBE
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4068

C:\Users\Admin\AppData\Local\Temp\6CF2.tmp

Filesize
384KB

MD5
3523bc68852cc2727eb44b4d09612fde

SHA1
c444e1763f59b504b2de2dbae415eea0d4570280

SHA256
7ee9acbb6abcbca16722b34601f3aadb60e03bf1811e59a8a561ef0d9b898d45

SHA512
444de63f5649ee9f1dd91f18b6b7698294c237d2307dc7a16af366467c93622d601d0c6abd4c7e10f9580f57380486870b8ffd93eacbc4372928d8b02ac91683

Download Submit