bf38af32782fbf66b88a3597813f8cb9829357d7858cab43928342d83f54c5e2

Analysis

max time kernel
96s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
31/05/2024, 08:01

Target
2024-05-31_eae1cb0f2e10e60cb71e9a4987985db4_mafia.exe
Size 428KB
Sample240531-jwhyzscg35
SHA256 bf38af32782fbf66b88a3597813f8cb9829357d7858cab43928342d83f54c5e2
MD5 eae1cb0f2e10e60cb71e9a4987985db4
SHA1 66bcce275af189cfc5381971d3eb20b7df3bcd46
SHA512 92c5c58957fd11654f08b4c4fc5e337f639835f7d11b6c4935eb29d74fbb2308f6382c8b519db3eb2cbff5cbda9c1788a1d45022687dc5698febe93b4c2e7091
SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFeiHoA3Rg0J4gct83i8E9ZDNz6QCy2uC7OIDIzxqx:gZLolhNVyETidg0J4bscRl6+CCxqHR
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Deletes itself 1 IoCs

pid	Process
880	7511.tmp

Executes dropped EXE 1 IoCs

pid	Process
880	7511.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1528 wrote to memory of 880	1528	2024-05-31_eae1cb0f2e10e60cb71e9a4987985db4_mafia.exe	84
PID 1528 wrote to memory of 880	1528	2024-05-31_eae1cb0f2e10e60cb71e9a4987985db4_mafia.exe	84
PID 1528 wrote to memory of 880	1528	2024-05-31_eae1cb0f2e10e60cb71e9a4987985db4_mafia.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-05-31_eae1cb0f2e10e60cb71e9a4987985db4_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-31_eae1cb0f2e10e60cb71e9a4987985db4_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1528
- C:\Users\Admin\AppData\Local\Temp\7511.tmp
  "C:\Users\Admin\AppData\Local\Temp\7511.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-05-31_eae1cb0f2e10e60cb71e9a4987985db4_mafia.exe 6CD46BEA5087FF1604530F2766AE439741879CD6DC94BFBBE5877BEE652432A188E940D502027834940565C40102F0D90A2480D15E0AC655DBAE81D5E87EDC94
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:880

7511.tmp

Path C:\Users\Admin\AppData\Local\Temp\7511.tmp
Size 428KB
SHA256 c7f5b5254878117bde3abaf4ec5878d975b9c23beeae79d9245387e6209680c2
MD5 51cf5dc7830d8e3f3c405ee6b3559798
SHA1 9bf4ede64dfe0e3cdc81cb11369a6fe670195aa5
SHA512 e07dc19ba8091ae9680d30c9307ae034940fb99caaa6f6ce1b64d7a77b7242d17230162bad1c7446923e93c0ca299e8c372607cef59e4c159fb6d12c7bda850a
SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFLMBgtr5YAspvnNf77j4A7wrOikiR2hF57WNwclHK:gZLolhNVyEnCtYLpvhc3O1mNvHqHR
MD5 SHA1 SHA512 SSDEEP

Submit Download