Overview

overview

3

Static

static

3

BatchPrint.exe

windows7-x64

3

BatchPrint.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    128s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/06/2023, 17:49

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    BatchPrint.exe

  • Size

    48KB

  • MD5

    84f188a5bc5654b48c957b1627b15651

  • SHA1

    30597ef7a9699bc0bd0a4248807ade11cd598d30

  • SHA256

    4b95ee9f9b6af99168d968a1e5f1e572a8fc905faf1fab6f8f9afcfee05d4bee

  • SHA512

    3333a3c65e6e8d8ec07d82ddeb2b2658ddb5a6451b65c9863dfb4d96b031ec9381d5eb4b9e988e4d9803bac84b41358b1a7d7b5f3fe23e4aadab35ea07524622

  • SSDEEP

    768:gawqM6sgb6aldoWGJiJGMpq9zl+cGu2R+3HiH:kZgb6a3oWGJiJglsum+3CH

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BatchPrint.exe
    "C:\Users\Admin\AppData\Local\Temp\BatchPrint.exe"
    1⤵
      PID:1996
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1996 -s 880
        2⤵
        • Program crash
        PID:4040
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 1996 -ip 1996
      1⤵
        PID:916

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/1996-133-0x0000000000F90000-0x0000000000FA2000-memory.dmp

              Filesize

              72KB

              Download