50d980b6bf589c00adacdf6d646f1bffd0f0b9412830c551d24507c33752c0ae

Analysis

max time kernel
194s
max time network
131s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
11/10/2023, 15:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

timerr.bat
Size

1KB
MD5

35d5b5fd55e19b748f9eaa22a3d8c535
SHA1

e26b45545a9042bd18cc7e27f19962aea1b6f9ca
SHA256

50d980b6bf589c00adacdf6d646f1bffd0f0b9412830c551d24507c33752c0ae
SHA512

4e9b9ac947654b90857d0a54aae1a745ea19bf48b0294a7de66bd18cee1b897dda9cf10b18bd213360552f2b8e72d6ba47d86eeeff45d2424bce10cb1adc36ad

Score

1^/10

Malware Config

Signatures

Delays execution with timeout.exe 64 IoCs

evasion

pid	Process
2088	timeout.exe
2084	timeout.exe
1832	timeout.exe
1784	timeout.exe
2116	timeout.exe
1932	timeout.exe
1948	timeout.exe
2780	timeout.exe
3040	timeout.exe
2180	timeout.exe
2812	timeout.exe
1160	timeout.exe
1072	timeout.exe
1840	timeout.exe
1420	timeout.exe
1744	timeout.exe
2280	timeout.exe
3064	timeout.exe
2544	timeout.exe
1756	timeout.exe
592	timeout.exe
816	timeout.exe
1712	timeout.exe
1960	timeout.exe
2404	timeout.exe
1040	timeout.exe
1644	timeout.exe
2520	timeout.exe
3028	timeout.exe
1924	timeout.exe
2188	timeout.exe
2960	timeout.exe
2396	timeout.exe
1352	timeout.exe
2040	timeout.exe
1624	timeout.exe
1060	timeout.exe
1356	timeout.exe
1616	timeout.exe
2808	timeout.exe
2108	timeout.exe
2760	timeout.exe
2360	timeout.exe
1864	timeout.exe
1176	timeout.exe
2312	timeout.exe
1788	timeout.exe
2848	timeout.exe
1920	timeout.exe
240	timeout.exe
1776	timeout.exe
1128	timeout.exe
984	timeout.exe
1104	timeout.exe
2224	timeout.exe
2880	timeout.exe
1172	timeout.exe
980	timeout.exe
3036	timeout.exe
2592	timeout.exe
548	timeout.exe
1300	timeout.exe
2220	timeout.exe
2236	timeout.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2936 wrote to memory of 2656	2936	cmd.exe	30
PID 2936 wrote to memory of 2656	2936	cmd.exe	30
PID 2936 wrote to memory of 2656	2936	cmd.exe	30
PID 2936 wrote to memory of 2400	2936	cmd.exe	31
PID 2936 wrote to memory of 2400	2936	cmd.exe	31
PID 2936 wrote to memory of 2400	2936	cmd.exe	31
PID 2936 wrote to memory of 2544	2936	cmd.exe	33
PID 2936 wrote to memory of 2544	2936	cmd.exe	33
PID 2936 wrote to memory of 2544	2936	cmd.exe	33
PID 2936 wrote to memory of 2636	2936	cmd.exe	34
PID 2936 wrote to memory of 2636	2936	cmd.exe	34
PID 2936 wrote to memory of 2636	2936	cmd.exe	34
PID 2936 wrote to memory of 2780	2936	cmd.exe	35
PID 2936 wrote to memory of 2780	2936	cmd.exe	35
PID 2936 wrote to memory of 2780	2936	cmd.exe	35
PID 2936 wrote to memory of 2520	2936	cmd.exe	36
PID 2936 wrote to memory of 2520	2936	cmd.exe	36
PID 2936 wrote to memory of 2520	2936	cmd.exe	36
PID 2936 wrote to memory of 2516	2936	cmd.exe	37
PID 2936 wrote to memory of 2516	2936	cmd.exe	37
PID 2936 wrote to memory of 2516	2936	cmd.exe	37
PID 2936 wrote to memory of 2540	2936	cmd.exe	38
PID 2936 wrote to memory of 2540	2936	cmd.exe	38
PID 2936 wrote to memory of 2540	2936	cmd.exe	38
PID 2936 wrote to memory of 2564	2936	cmd.exe	39
PID 2936 wrote to memory of 2564	2936	cmd.exe	39
PID 2936 wrote to memory of 2564	2936	cmd.exe	39
PID 2936 wrote to memory of 2596	2936	cmd.exe	40
PID 2936 wrote to memory of 2596	2936	cmd.exe	40
PID 2936 wrote to memory of 2596	2936	cmd.exe	40
PID 2936 wrote to memory of 2644	2936	cmd.exe	41
PID 2936 wrote to memory of 2644	2936	cmd.exe	41
PID 2936 wrote to memory of 2644	2936	cmd.exe	41
PID 2936 wrote to memory of 1444	2936	cmd.exe	42
PID 2936 wrote to memory of 1444	2936	cmd.exe	42
PID 2936 wrote to memory of 1444	2936	cmd.exe	42
PID 2936 wrote to memory of 3012	2936	cmd.exe	43
PID 2936 wrote to memory of 3012	2936	cmd.exe	43
PID 2936 wrote to memory of 3012	2936	cmd.exe	43
PID 2936 wrote to memory of 3040	2936	cmd.exe	44
PID 2936 wrote to memory of 3040	2936	cmd.exe	44
PID 2936 wrote to memory of 3040	2936	cmd.exe	44
PID 2936 wrote to memory of 3028	2936	cmd.exe	45
PID 2936 wrote to memory of 3028	2936	cmd.exe	45
PID 2936 wrote to memory of 3028	2936	cmd.exe	45
PID 2936 wrote to memory of 1356	2936	cmd.exe	46
PID 2936 wrote to memory of 1356	2936	cmd.exe	46
PID 2936 wrote to memory of 1356	2936	cmd.exe	46
PID 2936 wrote to memory of 2536	2936	cmd.exe	47
PID 2936 wrote to memory of 2536	2936	cmd.exe	47
PID 2936 wrote to memory of 2536	2936	cmd.exe	47
PID 2936 wrote to memory of 2500	2936	cmd.exe	48
PID 2936 wrote to memory of 2500	2936	cmd.exe	48
PID 2936 wrote to memory of 2500	2936	cmd.exe	48
PID 2936 wrote to memory of 1792	2936	cmd.exe	49
PID 2936 wrote to memory of 1792	2936	cmd.exe	49
PID 2936 wrote to memory of 1792	2936	cmd.exe	49
PID 2936 wrote to memory of 2408	2936	cmd.exe	50
PID 2936 wrote to memory of 2408	2936	cmd.exe	50
PID 2936 wrote to memory of 2408	2936	cmd.exe	50
PID 2936 wrote to memory of 2832	2936	cmd.exe	51
PID 2936 wrote to memory of 2832	2936	cmd.exe	51
PID 2936 wrote to memory of 2832	2936	cmd.exe	51
PID 2936 wrote to memory of 2840	2936	cmd.exe	52

Views/modifies file attributes 1 TTPs 1 IoCs

evasion

Hidden Files and Directories

T1564.001

pid	Process
2400	attrib.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\timerr.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2936
- C:\Windows\system32\mode.com
  mode con cols=800 lines=100
  2⤵
  PID:2656
- C:\Windows\system32\attrib.exe
  attrib +h C:\Users\Admin\AppData\Local\Temp\timerr.bat
  2⤵
  - Views/modifies file attributes
  PID:2400
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2544
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2636
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2780
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2520
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2516
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2540
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2564
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2596
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2644
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1444
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:3012
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:3040
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:3028
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1356
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2536
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2500
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1792
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2408
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2832
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2840
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2880
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2848
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:3036
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1352
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2356
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1924
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1920
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2816
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2040
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1756
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2000
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1960
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2180
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1284
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2808
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2188
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2196
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:848
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1696
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:280
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:240
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:884
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1680
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2592
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1288
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2108
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2828
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2812
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:592
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:588
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:268
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:548
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:780
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1800
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2052
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1840
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1872
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1624
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1632
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1628
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:876
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1484
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1536
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1528
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1776
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1420
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1744
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1300
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2072
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2112
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2260
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2032
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1404
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1508
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:996
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1648
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2456
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2096
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2100
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2760
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1060
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2296
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2208
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2360
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2404
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2088
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1172
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1128
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1496
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1040
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1864
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:984
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2396
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:816
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2084
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1832
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1100
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1176
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1784
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:988
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:432
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2328
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2268
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1080
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2312
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1104
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2424
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:700
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2116
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1044
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1160
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1692
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1672
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1932
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2956
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1400
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1616
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1360
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1620
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:748
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:980
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2488
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1644
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1108
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1036
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2184
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1652
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1072
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:108
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:608
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2280
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:708
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1556
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1948
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2444
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2220
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2920
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2200
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2960
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1712
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2252
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1504
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2224
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1788
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2216
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:3064
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1760
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2236

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads