Analysis
-
max time kernel
34s -
max time network
43s -
platform
windows7_x64 -
resource
win7-20220715-en -
resource tags
arch:x64arch:x86image:win7-20220715-enlocale:en-usos:windows7-x64system -
submitted
09-08-2022 16:24
Static task
static1
Behavioral task
behavioral1
Sample
cmd.bat
Resource
win7-20220715-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
cmd.bat
Resource
win10v2004-20220721-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
measurex64.dll
Resource
win7-20220718-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
measurex64.dll
Resource
win10v2004-20220721-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
cmd.bat
-
Size
187B
-
MD5
8951670338900cdb7c9d5b7f7d0f392d
-
SHA1
f7e16ef45ce0854c6a06c24ca8bb80e41c0b8658
-
SHA256
ddf4cc8bc5a4669a6066d2b41863493c33fc743acc74aeda12b16228ebbe0646
-
SHA512
ff7b5962aab5fae78e55771f58d08bfef69cb672f751e7951d2d6591ad5beea8b4cd84c865755c468d3659b85e31e229e76829796f39ef3e5f53f4f017ec3ee5
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
cmd.exedescription pid process target process PID 1564 wrote to memory of 2044 1564 cmd.exe rundll32.exe PID 1564 wrote to memory of 2044 1564 cmd.exe rundll32.exe PID 1564 wrote to memory of 2044 1564 cmd.exe rundll32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2044-54-0x0000000000000000-mapping.dmp