bb11104b206351f7171752d38443081aa3ba307c8382fae399e1b08c3262f925

Analysis

max time kernel
138s
max time network
100s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
30/04/2024, 02:54

Target

2024-04-30_b0c9c45689cf7b6378690274fafab7a7_mafia.exe
Size

384KB
MD5

b0c9c45689cf7b6378690274fafab7a7
SHA1

bc5cf520f3981b159ce39ae59d3936d06988920b
SHA256

bb11104b206351f7171752d38443081aa3ba307c8382fae399e1b08c3262f925
SHA512

ebf5f02cb36690fad5ea6341d9a3be06d5ed0cdcd07fd7e246d82c9cb8d60a632ca49602b9509ac2a83cbf2844673f7193f287bdb9867062cfb935c3a2b84b12
SSDEEP

6144:drxfv4co9ZL3GBGgjODxbf7hHrdIbtqVp/4q5CvIGe8xrCfVH9Z:Zm48gODxbzEbtqcG0brc9Z

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4628	4AA5.tmp

Executes dropped EXE 1 IoCs

pid	Process
4628	4AA5.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1920 wrote to memory of 4628	1920	2024-04-30_b0c9c45689cf7b6378690274fafab7a7_mafia.exe	85
PID 1920 wrote to memory of 4628	1920	2024-04-30_b0c9c45689cf7b6378690274fafab7a7_mafia.exe	85
PID 1920 wrote to memory of 4628	1920	2024-04-30_b0c9c45689cf7b6378690274fafab7a7_mafia.exe	85

C:\Users\Admin\AppData\Local\Temp\2024-04-30_b0c9c45689cf7b6378690274fafab7a7_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-30_b0c9c45689cf7b6378690274fafab7a7_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1920
- C:\Users\Admin\AppData\Local\Temp\4AA5.tmp
  "C:\Users\Admin\AppData\Local\Temp\4AA5.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-04-30_b0c9c45689cf7b6378690274fafab7a7_mafia.exe FC095EC09B469532D495FE784D7D03708D0966F6C3CEB6552D74AC74B640EF27E698B87C3992630EBF7B8763C73A44E97036D1A2B62092C74EF42DFF218229BF
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4628

C:\Users\Admin\AppData\Local\Temp\4AA5.tmp

Filesize
384KB

MD5
a878c8a0de33869ba859ebcbbd25d521

SHA1
a250c0eb12240cd645bb9df47e50ae61b7d526a2

SHA256
628c781c60ea8e6144dddc5eda189a1d044721271a078adee384d0259b1eaf06

SHA512
34246dad042b781672f4b8fb0621c6d94409f344cf786e2c579bb73ff735dd3d0af11a270cf9ea604297224373a647ccca03e41b2e305c4e7970ecce16e14446

Download Submit