f53fad693013375afe3a520de1c7712c981f09cc56913f5cfeece4d232a7022d

Analysis

max time kernel
150s
max time network
126s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
11-10-2023 20:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

________________.bat
Size

2KB
MD5

3599d2e4bcc80a9a63e19f4e4bcfa5bd
SHA1

fc3b9cfd06291166e7667bfe2e01062e929dcf2b
SHA256

f53fad693013375afe3a520de1c7712c981f09cc56913f5cfeece4d232a7022d
SHA512

4e387cb216540ead50deafdd4fa94b52be85a10b8ff8c34ff1b06ca09c95b432812687a528f0999195a7e4f6bab178cd7e09b758513430efb5adea79c967a1b2

Score

1^/10

Malware Config

Signatures

Delays execution with timeout.exe 64 IoCs

evasion

pid	Process
2068	timeout.exe
896	timeout.exe
2572	timeout.exe
1672	timeout.exe
1688	timeout.exe
1092	timeout.exe
2484	timeout.exe
1804	timeout.exe
1996	timeout.exe
2156	timeout.exe
2792	timeout.exe
2860	timeout.exe
300	timeout.exe
1820	timeout.exe
760	timeout.exe
2624	timeout.exe
2688	timeout.exe
2536	timeout.exe
2884	timeout.exe
2936	timeout.exe
1536	timeout.exe
2832	timeout.exe
2928	timeout.exe
2272	timeout.exe
2956	timeout.exe
3000	timeout.exe
2076	timeout.exe
2748	timeout.exe
2764	timeout.exe
1776	timeout.exe
2960	timeout.exe
1816	timeout.exe
832	timeout.exe
2676	timeout.exe
2912	timeout.exe
2296	timeout.exe
2260	timeout.exe
1344	timeout.exe
308	timeout.exe
2520	timeout.exe
2760	timeout.exe
704	timeout.exe
672	timeout.exe
2136	timeout.exe
1796	timeout.exe
2380	timeout.exe
1892	timeout.exe
2596	timeout.exe
2768	timeout.exe
2984	timeout.exe
2588	timeout.exe
2952	timeout.exe
1580	timeout.exe
2652	timeout.exe
3012	timeout.exe
1184	timeout.exe
2620	timeout.exe
1620	timeout.exe
1636	timeout.exe
680	timeout.exe
1592	timeout.exe
2880	timeout.exe
1248	timeout.exe
1476	timeout.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1908 wrote to memory of 2376	1908	cmd.exe	29
PID 1908 wrote to memory of 2376	1908	cmd.exe	29
PID 1908 wrote to memory of 2376	1908	cmd.exe	29
PID 1908 wrote to memory of 2612	1908	cmd.exe	30
PID 1908 wrote to memory of 2612	1908	cmd.exe	30
PID 1908 wrote to memory of 2612	1908	cmd.exe	30
PID 1908 wrote to memory of 1216	1908	cmd.exe	31
PID 1908 wrote to memory of 1216	1908	cmd.exe	31
PID 1908 wrote to memory of 1216	1908	cmd.exe	31
PID 1908 wrote to memory of 2728	1908	cmd.exe	32
PID 1908 wrote to memory of 2728	1908	cmd.exe	32
PID 1908 wrote to memory of 2728	1908	cmd.exe	32
PID 1908 wrote to memory of 2748	1908	cmd.exe	33
PID 1908 wrote to memory of 2748	1908	cmd.exe	33
PID 1908 wrote to memory of 2748	1908	cmd.exe	33
PID 1908 wrote to memory of 2724	1908	cmd.exe	34
PID 1908 wrote to memory of 2724	1908	cmd.exe	34
PID 1908 wrote to memory of 2724	1908	cmd.exe	34
PID 1908 wrote to memory of 2676	1908	cmd.exe	35
PID 1908 wrote to memory of 2676	1908	cmd.exe	35
PID 1908 wrote to memory of 2676	1908	cmd.exe	35
PID 1908 wrote to memory of 2624	1908	cmd.exe	36
PID 1908 wrote to memory of 2624	1908	cmd.exe	36
PID 1908 wrote to memory of 2624	1908	cmd.exe	36
PID 1908 wrote to memory of 3032	1908	cmd.exe	37
PID 1908 wrote to memory of 3032	1908	cmd.exe	37
PID 1908 wrote to memory of 3032	1908	cmd.exe	37
PID 1908 wrote to memory of 2652	1908	cmd.exe	38
PID 1908 wrote to memory of 2652	1908	cmd.exe	38
PID 1908 wrote to memory of 2652	1908	cmd.exe	38
PID 1908 wrote to memory of 2764	1908	cmd.exe	39
PID 1908 wrote to memory of 2764	1908	cmd.exe	39
PID 1908 wrote to memory of 2764	1908	cmd.exe	39
PID 1908 wrote to memory of 2528	1908	cmd.exe	40
PID 1908 wrote to memory of 2528	1908	cmd.exe	40
PID 1908 wrote to memory of 2528	1908	cmd.exe	40
PID 1908 wrote to memory of 2388	1908	cmd.exe	41
PID 1908 wrote to memory of 2388	1908	cmd.exe	41
PID 1908 wrote to memory of 2388	1908	cmd.exe	41
PID 1908 wrote to memory of 3028	1908	cmd.exe	42
PID 1908 wrote to memory of 3028	1908	cmd.exe	42
PID 1908 wrote to memory of 3028	1908	cmd.exe	42
PID 1908 wrote to memory of 2680	1908	cmd.exe	43
PID 1908 wrote to memory of 2680	1908	cmd.exe	43
PID 1908 wrote to memory of 2680	1908	cmd.exe	43
PID 1908 wrote to memory of 2832	1908	cmd.exe	44
PID 1908 wrote to memory of 2832	1908	cmd.exe	44
PID 1908 wrote to memory of 2832	1908	cmd.exe	44
PID 1908 wrote to memory of 2548	1908	cmd.exe	45
PID 1908 wrote to memory of 2548	1908	cmd.exe	45
PID 1908 wrote to memory of 2548	1908	cmd.exe	45
PID 1908 wrote to memory of 2992	1908	cmd.exe	46
PID 1908 wrote to memory of 2992	1908	cmd.exe	46
PID 1908 wrote to memory of 2992	1908	cmd.exe	46
PID 1908 wrote to memory of 3000	1908	cmd.exe	47
PID 1908 wrote to memory of 3000	1908	cmd.exe	47
PID 1908 wrote to memory of 3000	1908	cmd.exe	47
PID 1908 wrote to memory of 1996	1908	cmd.exe	48
PID 1908 wrote to memory of 1996	1908	cmd.exe	48
PID 1908 wrote to memory of 1996	1908	cmd.exe	48
PID 1908 wrote to memory of 2684	1908	cmd.exe	49
PID 1908 wrote to memory of 2684	1908	cmd.exe	49
PID 1908 wrote to memory of 2684	1908	cmd.exe	49
PID 1908 wrote to memory of 2688	1908	cmd.exe	50

Views/modifies file attributes 1 TTPs 1 IoCs

evasion

Hidden Files and Directories

T1564.001

pid	Process
2612	attrib.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\________________.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:1908
- C:\Windows\system32\mode.com
  mode con cols= 300 lines= 100
  2⤵
  PID:2376
- C:\Windows\system32\attrib.exe
  attrib +h C:\Users\Admin\AppData\Local\Temp\________________.bat
  2⤵
  - Views/modifies file attributes
  PID:2612
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1216
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2728
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2748
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2724
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2676
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2624
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:3032
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2652
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2764
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2528
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2388
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:3028
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2680
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2832
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2548
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2992
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:3000
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1996
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2684
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2688
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2564
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2716
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2520
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2516
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2536
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2552
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2576
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2596
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2000
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1896
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2152
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2380
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2096
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2156
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1956
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2012
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2500
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2496
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2768
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2956
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2968
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2940
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2980
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2984
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2916
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2896
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2928
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2588
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2792
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2760
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2696
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2620
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2816
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2788
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2912
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2860
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2812
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2272
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1692
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2572
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2416
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2880
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1776
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1892
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2960
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2952
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2944
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2884
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2924
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1672
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1704
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1620
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1580
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1624
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2084
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1636
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1628
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1196
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2452
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1400
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1688
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2140
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:856
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1408
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1960
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2076
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2700
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:3056
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:3060
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:3012
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2304
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2296
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1212
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2280
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1872
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2936
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:268
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:656
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:476
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:768
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1092
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1248
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:980
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:704
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1552
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:576
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1476
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:680
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2260
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2336
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1924
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1184
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1532
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:300
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:672
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:440
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1168
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1344
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2400
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2056
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2136
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2484
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2488
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1880
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1540
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1252
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1260
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1848
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1804
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1548
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1592
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1932
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1240
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1276
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:732
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1644
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1816
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:308
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1820
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:2068
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:1812
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2092
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1796
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:896
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:940
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:556
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:760
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:832
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:1536
- C:\Windows\system32\timeout.exe
  timeout /t 1 /nobreak
  2⤵
  PID:2312

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads