cdfb9f48c726a51c850265f8b354c75262272d0fc885b3f05ac60b7f21d3e551

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
10/07/2024, 07:50

Target

2024-07-10_59630c369ccbb0930266ae80afa16b3e_mafia.exe
Size

428KB
MD5

59630c369ccbb0930266ae80afa16b3e
SHA1

cb0e90a48f66baac400697c193b0fdedbb50c202
SHA256

cdfb9f48c726a51c850265f8b354c75262272d0fc885b3f05ac60b7f21d3e551
SHA512

a66a86a25f9ebd9794c8e3edde1cc844feb03d60c5f5a6ddb6aa36bd4a0611b55bbdac3e59207422eddd9b6d34cc4827c9aa39b0bec4678cb0648416ab7d4798
SSDEEP

6144:gVdvczEb7GUOpYWhNVynE/mFF6RWutREDTXmhiOd5ygYc91SBfNqHR:gZLolhNVyE3LPAXA8xNqHR

Score

7^/10

Deletes itself 1 IoCs

pid	Process
1664	DEB7.tmp

Executes dropped EXE 1 IoCs

pid	Process
1664	DEB7.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3180 wrote to memory of 1664	3180	2024-07-10_59630c369ccbb0930266ae80afa16b3e_mafia.exe	82
PID 3180 wrote to memory of 1664	3180	2024-07-10_59630c369ccbb0930266ae80afa16b3e_mafia.exe	82
PID 3180 wrote to memory of 1664	3180	2024-07-10_59630c369ccbb0930266ae80afa16b3e_mafia.exe	82

C:\Users\Admin\AppData\Local\Temp\2024-07-10_59630c369ccbb0930266ae80afa16b3e_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-07-10_59630c369ccbb0930266ae80afa16b3e_mafia.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3180
- C:\Users\Admin\AppData\Local\Temp\DEB7.tmp
  "C:\Users\Admin\AppData\Local\Temp\DEB7.tmp" --pingC:\Users\Admin\AppData\Local\Temp\2024-07-10_59630c369ccbb0930266ae80afa16b3e_mafia.exe 09907F38F53CC8DAF22B2CB56F0BAFC09401F82C5014AD87FBC15D41E29600BF4073C0C0D80FD34AC0E529D835F270268C53741A1F8DCC575875171B5521241F
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:1664

C:\Users\Admin\AppData\Local\Temp\DEB7.tmp

Filesize
428KB

MD5
23a496313338f09a433b3677a78b5d60

SHA1
82ae7be394575c6824de5f1071563dc67bc4bc9f

SHA256
47beb35ea61e3926ad0324d4b10d1be3d7b197b9dc42467c7255e9906bbdb200

SHA512
611e4da2f805c167c387676afd4e7fa7b278342aed87986301c6ee7d945c9dbd70106b51169b96246eb1aaace84f1c483a3f133d28c3a56ac2a424c715e6e2c0

Download Submit