fefb79325d44d3a2c214ec7c2a8e678d663346faa042c9dbe7ac672b653d75c2 | Triage

Analysis

max time kernel
99s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
22/04/2023, 02:54

Sharing

Report Analysis Logs

General

Target

Lol.bat
Size

35B
MD5

6ac2d5275dc76ce4f2dfd738d6626fa0
SHA1

e1ba398f95dfe390b91352180be42d4f90626cd0
SHA256

fefb79325d44d3a2c214ec7c2a8e678d663346faa042c9dbe7ac672b653d75c2
SHA512

eec329163fa86e99aa2abab9aca3de71ae3d6a24b11e65a4a2b005647083f4421d3e05bd3281c4a028c2f986f2bbe9cfaa9d9d61f892496f6cb8c033b2df5e9f

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 1520 wrote to memory of 4972	1520	cmd.exe	83
PID 1520 wrote to memory of 4972	1520	cmd.exe	83

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Lol.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:1520
- C:\Windows\system32\cmd.exe
  cmd.exe
  2⤵
  PID:4972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads