696431978daadd33a28841320659835ba8db8080a535b8f35e9e60701ab8b491

Resubmissions

29-06-2023 14:46

29-06-2023 14:43

max time kernel
22s
max time network
37s
platform
windows7_x64
resource
win7-20230621-en
resource tags

arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system
submitted
29-06-2023 14:43

Target

cmdline-tools/bin/lint.bat
Size

2KB
MD5

5976e9007acd24b391b8f74d604c928b
SHA1

826fea8f25bd31ba02cbb0a8dfd1a0791e577d04
SHA256

1ed541dff732ab5afc03902044c5e986f848686ba329168e5a8f143ce0741ec0
SHA512

3aaf8e2a3ff965bbf8680633fd9a4564460b673c0d095433ae108b9be0c525103d8ebf6eb0f1aa3f228f56cd63f04b95899cc511b3772356076068dd71f21a20

Score

1^/10

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 1312 wrote to memory of 884	1312	cmd.exe	29
PID 1312 wrote to memory of 884	1312	cmd.exe	29
PID 1312 wrote to memory of 884	1312	cmd.exe	29
PID 1312 wrote to memory of 1712	1312	cmd.exe	30
PID 1312 wrote to memory of 1712	1312	cmd.exe	30
PID 1312 wrote to memory of 1712	1312	cmd.exe	30

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\cmdline-tools\bin\lint.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:1312
- C:\Windows\system32\java.exe
  java.exe -version
  2⤵
  PID:884
- C:\Windows\system32\java.exe
  "java.exe" -Xmx1024m -Dcom.android.tools.lint.bindir=C:\Users\Admin\AppData\Local\Temp\cmdline-tools\bin\\.. -classpath "C:\Users\Admin\AppData\Local\Temp\cmdline-tools\bin\..\lib\lint-classpath.jar" com.android.tools.lint.Main
  2⤵
  PID:1712

memory/884-64-0x0000000000130000-0x0000000000131000-memory.dmp

Filesize
4KB

Download
memory/884-65-0x0000000000130000-0x0000000000131000-memory.dmp

Filesize
4KB

Download
memory/1712-76-0x0000000000420000-0x0000000000421000-memory.dmp

Filesize
4KB

Download