06931ce95d25b0fd0bcd5659228516279e786018c6b9344446cbda0be183471c

General

Target

PONO6188.vbs
Size

59KB
MD5

3c00879a0e4e4a7d7b78bb8611bcc94f
SHA1

3ddd2f54b7fb54df60134318515fd61b119bc46f
SHA256

94ffc7bec0cef06550d739bc5014a3232c9218a50524de0464b53b6dbbd7ed5f
SHA512

4dfce826cf9f7456dd981b4a1b4c985d75c9c849434a94c5987bd08fe037217b5160441e23072c498b5e9c93e2d00d8c6e814ea1736e68724aa461881ab1b31c
SSDEEP

1536:cdukLI1gPDPTxyk0MfFCNqnlAEfen8TCQr:Yukk1gPDJzoGaEWn8Tv

Score

1^/10

Malware Config

Signatures

Runs ping.exe 1 TTPs 64 IoCs

Remote System Discovery

T1018

Processes:

ping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exeping.exe

pid	process
4204	ping.exe
4824	ping.exe
1620	ping.exe
3320	ping.exe
2456	ping.exe
920	ping.exe
4084	ping.exe
4948	ping.exe
1100	ping.exe
1988	ping.exe
1616	ping.exe
1400	ping.exe
2464	ping.exe
4876	ping.exe
1768	ping.exe
3092	ping.exe
2560	ping.exe
3512	ping.exe
3636	ping.exe
784	ping.exe
1072	ping.exe
2716	ping.exe
4896	ping.exe
4452	ping.exe
4916	ping.exe
1092	ping.exe
2380	ping.exe
1984	ping.exe
1240	ping.exe
1092	ping.exe
1548	ping.exe
2448	ping.exe
2252	ping.exe
3448	ping.exe
4368	ping.exe
3780	ping.exe
4968	ping.exe
3340	ping.exe
4080	ping.exe
4508	ping.exe
5092	ping.exe
2080	ping.exe
4328	ping.exe
4316	ping.exe
2636	ping.exe
400	ping.exe
2544	ping.exe
2652	ping.exe
868	ping.exe
4604	ping.exe
3952	ping.exe
3216	ping.exe
2476	ping.exe
4048	ping.exe
3836	ping.exe
1428	ping.exe
844	ping.exe
4460	ping.exe
1212	ping.exe
3796	ping.exe
3572	ping.exe
1956	ping.exe
4104	ping.exe
4328	ping.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

WScript.exe

description	pid	process	target process
PID 1552 wrote to memory of 3800	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 3800	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 3644	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 3644	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4860	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4860	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 3092	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 3092	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4484	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4484	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4000	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4000	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4864	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4864	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 3836	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 3836	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4080	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4080	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4028	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4028	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4264	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4264	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4388	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4388	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 3872	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 3872	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 1864	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 1864	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4552	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4552	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 2952	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 2952	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 2380	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 2380	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 400	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 400	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4472	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4472	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 888	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 888	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4720	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4720	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 3752	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 3752	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4476	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4476	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 3320	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 3320	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 1524	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 1524	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4292	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4292	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 3568	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 3568	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4532	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4532	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 1012	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 1012	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4916	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 4916	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 2560	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 2560	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 2892	1552	WScript.exe	ping.exe
PID 1552 wrote to memory of 2892	1552	WScript.exe	ping.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\PONO6188.vbs"
1⤵
- Suspicious use of WriteProcessMemory
PID:1552

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3800

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3644

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4860

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3092

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4484

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4000

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4864

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:3836

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:4080

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4028

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4264

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4388

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3872

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1864

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4552

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2952

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:2380

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:400

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4472

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:888

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4720

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3752

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4476

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:3320

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1524

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4292

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3568

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4532

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1012

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:4916

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2560

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2892

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:5000

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:4508

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4604

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2524

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:636

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1232

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1904

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4572

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1844

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3532

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1064

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4820

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2920

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2888

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:1548

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:868

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2356

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3948

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2476

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:1428

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4680

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4796

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3912

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4500

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4352

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:4948

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2244

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:768

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:640

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3216

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3180

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:3780

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:952

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3092

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1044

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:4204

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4908

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1712

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:5084

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2956

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3596

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:5020

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:696

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2888

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:936

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3952

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4964

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3868

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2116

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:116

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:468

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2652

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4708

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2320

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4592

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2800

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:4968

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:780

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4032

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4992

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4212

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4460

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:5092

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3788

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4080

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:2544

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:1072

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4800

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2128

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3720

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1912

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1548

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:2456

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:404

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2356

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4628

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4200

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4320

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2464

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3480

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2256

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4284

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4896

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:760

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2196

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1956

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:640

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:4604

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4008

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4884

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:952

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2228

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:4824

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4300

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2472

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4104

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:3572

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2496

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4704

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4976

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:844

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4964

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4828

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1052

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4808

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1920

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:1100

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1504

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4224

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:2560

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2892

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1832

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2208

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4508

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:3216

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:780

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3876

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3144

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2236

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:548

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2936

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:952

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2228

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2260

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:2716

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4800

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2128

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:400

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3940

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1980

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4280

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3504

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:464

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:116

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1524

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4320

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:868

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4996

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:1092

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1808

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3460

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:5112

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4592

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:1956

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:1988

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:4048

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2084

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3496

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2616

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2232

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2660

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4696

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4080

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3296

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4188

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2644

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3648

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3720

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4952

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:8

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3588

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:1400

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3456

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4964

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4476

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3808

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2600

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1864

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4500

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:784

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2540

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:5024

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4400

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:716

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4436

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3780

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4564

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:780

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3300

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1232

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1860

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:2448

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2856

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4448

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3596

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:5108

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4420

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:4104

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2496

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3436

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:3952

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3628

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:1984

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2476

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:464

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:228

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2700

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:1620

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:2464

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4656

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2256

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2592

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4292

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:5088

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4384

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:748

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3180

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1988

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:4328

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3740

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4488

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4640

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2188

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3252

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:5084

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:5116

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4188

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2452

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2920

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:3512

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2300

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:400

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:844

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:3636

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3504

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:5040

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4200

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:4876

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:4316

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:592

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1812

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:4460

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4724

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4796

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2432

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:920

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4348

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3516

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3968

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4496

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4872

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1044

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2800

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3440

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4988

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:4328

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3740

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3496

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1684

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3616

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3252

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4824

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4432

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2380

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1580

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2920

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3028

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1912

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2004

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4576

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2604

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4280

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:2476

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3312

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4304

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3236

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4320

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4112

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4500

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:2652

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:4896

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1944

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:1768

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2620

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3516

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2192

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3248

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3980

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2208

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3764

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2000

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2044

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:3092

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2084

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3740

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4488

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1684

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3616

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1616

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:1240

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2576

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:5044

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1528

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3584

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4056

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3500

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3752

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2356

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4628

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:388

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3316

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4680

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:1212

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2600

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4368

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1100

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4288

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:784

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3256

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2480

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3448

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1692

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3696

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1452

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:716

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:748

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2800

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3180

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4612

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3144

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4008

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:780

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4692

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:376

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:952

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4080

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:1616

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4300

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4256

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:5044

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3048

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4620

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4976

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4168

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3636

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:744

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4536

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1004

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:468

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4520

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1212

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4792

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4460

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4404

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:884

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:5024

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:2252

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1768

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:3448

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2584

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2080

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1452

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:716

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:748

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2800

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4440

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2560

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4860

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4564

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4376

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3664

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1064

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4252

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4448

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2956

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4728

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4800

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4396

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3204

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3940

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1492

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:2636

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:3340

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3504

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:212

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4200

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2700

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:4084

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4324

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:4368

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:1428

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:1092

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:3796

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:768

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2196

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4100

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4384

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:4452

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4872

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
- Runs ping.exe
PID:2080

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:5000

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:716

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:3216

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4360

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:4428

C:\Windows\System32\ping.exe
ping google.com -n 1
2⤵
PID:2148

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Remote System Discovery

1

T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads