f30f89040abd7f1ef3cf43ac0823e3f11f908821ebb7ec3914d5ec152e182037

Analysis

max time kernel
66s
max time network
51s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
27-04-2024 05:11

Target

2024-04-27_bfb829d49071d651b67062713746d729_mafia.exe
Size

412KB
MD5

bfb829d49071d651b67062713746d729
SHA1

7d810d6de72d2be6048a83e6a7dcaaa743023947
SHA256

f30f89040abd7f1ef3cf43ac0823e3f11f908821ebb7ec3914d5ec152e182037
SHA512

c2f2ad40b6519639e54639844dda459f2051745357e8d1ff934dcbb15e3bd41396304baceb0fe06565fb7eb78ffe6fde3d37ba2afbfcbf7d335d62958fccd6c0
SSDEEP

6144:UooTAQjKG3wDGAeIc9kphIoDZnsRjjH8mR5m2OxPEfl+CQuyPqfMterExP:U6PCrIc9kph5ORjz8ooxxUQxLteoR

Score

7^/10

Deletes itself 1 IoCs

pid	Process
456	4035.tmp

Executes dropped EXE 1 IoCs

pid	Process
456	4035.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3588 wrote to memory of 456	3588	2024-04-27_bfb829d49071d651b67062713746d729_mafia.exe	84
PID 3588 wrote to memory of 456	3588	2024-04-27_bfb829d49071d651b67062713746d729_mafia.exe	84
PID 3588 wrote to memory of 456	3588	2024-04-27_bfb829d49071d651b67062713746d729_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-04-27_bfb829d49071d651b67062713746d729_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-27_bfb829d49071d651b67062713746d729_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3588
- C:\Users\Admin\AppData\Local\Temp\4035.tmp
  "C:\Users\Admin\AppData\Local\Temp\4035.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-04-27_bfb829d49071d651b67062713746d729_mafia.exe EC053432A47ACD9A56029010550A4426D21D68B9DEEC3C7AF66B0AE6B0194FC2FD86D96545A3D0DAF933E84837775D3304B29F1BCD9A8E230788F38C6ACA50C1
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:456

C:\Users\Admin\AppData\Local\Temp\4035.tmp

Filesize
412KB

MD5
ae0c95188ffc6aba998f063c6d632c64

SHA1
7ac8913b81267d38f75468b01ae628790cfce253

SHA256
a1abaf589dec0b6b2e32274ac7481bd205f228de510ab7e3ffb476d7ef086f61

SHA512
5ec2c97cb703fe0e28abb79b48609a791be67a82e9a0bc4dac348b945ff43226a63c1258f7a63052f34a10b086bb6aa73a10d740662ae52e2bacf932721dd83c

Download Submit