0e2259d6803e7c4e95a99fd863fd713beba1384bc83292e91c4458fda63f7207

Analysis

max time kernel
51s
max time network
51s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
12/06/2024, 17:07

Target
2024-06-12_81309dc1211b04bca978152f13452ed4_mafia.exe
Size 486KB
Sample240612-vnc9basejc
SHA256 0e2259d6803e7c4e95a99fd863fd713beba1384bc83292e91c4458fda63f7207
MD5 81309dc1211b04bca978152f13452ed4
SHA1 fbd82ef4985d2fffc27bddb32caddd243a1ffc50
SHA512 509503d7f718457c99ef082ab3fb7d5604501919396044eb93f05d965e172ca89428dac6d8b3913f20498fbfaa45a04e1fcdcd5489b081e9f618341ba60d16c0
SSDEEP 12288:3O4rfItL8HP/tYMsZqLmAyceD9Uj8D9pgtsZ7rKxUYXhW:3O4rQtGPjBLmAvIUADLVZ3KxUYXhW
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2648	4DC2.tmp

Executes dropped EXE 1 IoCs

pid	Process
2648	4DC2.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1724 wrote to memory of 2648	1724	2024-06-12_81309dc1211b04bca978152f13452ed4_mafia.exe	82
PID 1724 wrote to memory of 2648	1724	2024-06-12_81309dc1211b04bca978152f13452ed4_mafia.exe	82
PID 1724 wrote to memory of 2648	1724	2024-06-12_81309dc1211b04bca978152f13452ed4_mafia.exe	82

C:\Users\Admin\AppData\Local\Temp\2024-06-12_81309dc1211b04bca978152f13452ed4_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-12_81309dc1211b04bca978152f13452ed4_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1724
- C:\Users\Admin\AppData\Local\Temp\4DC2.tmp
  "C:\Users\Admin\AppData\Local\Temp\4DC2.tmp" --helpC:\Users\Admin\AppData\Local\Temp\2024-06-12_81309dc1211b04bca978152f13452ed4_mafia.exe EF9727950978BA6269AD7E8C98F7E1BB45D9F35485188B60CA3CED96089B7929844D6FA08C996EFEA4CCE18F650E5E10B58BDB8D16578709E579D7EDE1EF0C92
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2648

4DC2.tmp

Path C:\Users\Admin\AppData\Local\Temp\4DC2.tmp
Size 486KB
SHA256 029bf89c2c18cc5aed719ccb79c18a822ad6e480e9b37d99fd85dab421676144
MD5 e0569c81492e8d86dc1bcbc75dace8de
SHA1 aecf8059500cc5f926ce7d596878a238bbcb141f
SHA512 0290fa1b2b0bee4667ea3afcd3d0338f21d40157acbe99db0aa6e3e43043ea6c1c4147b99c5891d189f168a02ed7fb6eac6dfb7f2468845f6c04d2999b9aadb8
SSDEEP 12288:3O4rfItL8HPS9ICVMc/iihTuPXnwt17rKxUYXhW:3O4rQtGPSeCS4egT3KxUYXhW
MD5 SHA1 SHA512 SSDEEP

Submit Download