1d52b44a08936ba0bda9340e6247fa036c85d463b530dde3730ea363f68dcbea

Analysis

max time kernel
152s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
12-10-2023 07:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

[[[[..bat
Size

333B
MD5

8364e526760fe3a0b16b471f7e0b6578
SHA1

85fc404641a20c765bb0bd80f6c4d859fb5c8559
SHA256

1d52b44a08936ba0bda9340e6247fa036c85d463b530dde3730ea363f68dcbea
SHA512

deae05b4f217349a9d724b357218a525d19c1dfda8c00c7ea3fbb8cbd2e5f60df3d04665a1241d89d690d6425ddcbe10febfda51b086db8ed0dfcfdd7b4c4e66

Score

1^/10

Malware Config

Signatures

Delays execution with timeout.exe 50 IoCs

evasion

pid	Process
5008	timeout.exe
4652	timeout.exe
4380	timeout.exe
4984	timeout.exe
4228	timeout.exe
2336	timeout.exe
4784	timeout.exe
3952	timeout.exe
3864	timeout.exe
3952	timeout.exe
4896	timeout.exe
4148	timeout.exe
4272	timeout.exe
2644	timeout.exe
3236	timeout.exe
824	timeout.exe
1832	timeout.exe
3068	timeout.exe
4616	timeout.exe
1068	timeout.exe
4452	timeout.exe
3912	timeout.exe
3876	timeout.exe
5092	timeout.exe
1156	timeout.exe
2076	timeout.exe
472	timeout.exe
3000	timeout.exe
4484	timeout.exe
2896	timeout.exe
4540	timeout.exe
1304	timeout.exe
2896	timeout.exe
1652	timeout.exe
3356	timeout.exe
1224	timeout.exe
752	timeout.exe
4120	timeout.exe
1724	timeout.exe
1308	timeout.exe
396	timeout.exe
1572	timeout.exe
648	timeout.exe
436	timeout.exe
936	timeout.exe
2836	timeout.exe
3440	timeout.exe
3064	timeout.exe
216	timeout.exe
1364	timeout.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4648 wrote to memory of 648	4648	cmd.exe	86
PID 4648 wrote to memory of 648	4648	cmd.exe	86
PID 4648 wrote to memory of 4120	4648	cmd.exe	88
PID 4648 wrote to memory of 4120	4648	cmd.exe	88
PID 4648 wrote to memory of 2028	4648	cmd.exe	89
PID 4648 wrote to memory of 2028	4648	cmd.exe	89
PID 4648 wrote to memory of 2104	4648	cmd.exe	90
PID 4648 wrote to memory of 2104	4648	cmd.exe	90
PID 4648 wrote to memory of 4296	4648	cmd.exe	91
PID 4648 wrote to memory of 4296	4648	cmd.exe	91
PID 4648 wrote to memory of 3648	4648	cmd.exe	92
PID 4648 wrote to memory of 3648	4648	cmd.exe	92
PID 4648 wrote to memory of 3968	4648	cmd.exe	93
PID 4648 wrote to memory of 3968	4648	cmd.exe	93
PID 4648 wrote to memory of 3000	4648	cmd.exe	94
PID 4648 wrote to memory of 3000	4648	cmd.exe	94
PID 4648 wrote to memory of 4744	4648	cmd.exe	96
PID 4648 wrote to memory of 4744	4648	cmd.exe	96
PID 4648 wrote to memory of 4980	4648	cmd.exe	97
PID 4648 wrote to memory of 4980	4648	cmd.exe	97
PID 4648 wrote to memory of 5076	4648	cmd.exe	98
PID 4648 wrote to memory of 5076	4648	cmd.exe	98
PID 4648 wrote to memory of 5028	4648	cmd.exe	99
PID 4648 wrote to memory of 5028	4648	cmd.exe	99
PID 4648 wrote to memory of 2752	4648	cmd.exe	100
PID 4648 wrote to memory of 2752	4648	cmd.exe	100
PID 4648 wrote to memory of 1644	4648	cmd.exe	101
PID 4648 wrote to memory of 1644	4648	cmd.exe	101
PID 4648 wrote to memory of 4784	4648	cmd.exe	102
PID 4648 wrote to memory of 4784	4648	cmd.exe	102
PID 4648 wrote to memory of 568	4648	cmd.exe	103
PID 4648 wrote to memory of 568	4648	cmd.exe	103
PID 4648 wrote to memory of 1944	4648	cmd.exe	104
PID 4648 wrote to memory of 1944	4648	cmd.exe	104
PID 4648 wrote to memory of 3688	4648	cmd.exe	105
PID 4648 wrote to memory of 3688	4648	cmd.exe	105
PID 4648 wrote to memory of 3536	4648	cmd.exe	106
PID 4648 wrote to memory of 3536	4648	cmd.exe	106
PID 4648 wrote to memory of 4340	4648	cmd.exe	107
PID 4648 wrote to memory of 4340	4648	cmd.exe	107
PID 4648 wrote to memory of 2732	4648	cmd.exe	108
PID 4648 wrote to memory of 2732	4648	cmd.exe	108
PID 4648 wrote to memory of 2836	4648	cmd.exe	109
PID 4648 wrote to memory of 2836	4648	cmd.exe	109
PID 4648 wrote to memory of 4160	4648	cmd.exe	110
PID 4648 wrote to memory of 4160	4648	cmd.exe	110
PID 4648 wrote to memory of 384	4648	cmd.exe	111
PID 4648 wrote to memory of 384	4648	cmd.exe	111
PID 4648 wrote to memory of 1984	4648	cmd.exe	112
PID 4648 wrote to memory of 1984	4648	cmd.exe	112
PID 4648 wrote to memory of 3376	4648	cmd.exe	113
PID 4648 wrote to memory of 3376	4648	cmd.exe	113
PID 4648 wrote to memory of 3476	4648	cmd.exe	114
PID 4648 wrote to memory of 3476	4648	cmd.exe	114
PID 4648 wrote to memory of 4216	4648	cmd.exe	115
PID 4648 wrote to memory of 4216	4648	cmd.exe	115
PID 4648 wrote to memory of 1304	4648	cmd.exe	116
PID 4648 wrote to memory of 1304	4648	cmd.exe	116
PID 4648 wrote to memory of 4000	4648	cmd.exe	117
PID 4648 wrote to memory of 4000	4648	cmd.exe	117
PID 4648 wrote to memory of 5092	4648	cmd.exe	118
PID 4648 wrote to memory of 5092	4648	cmd.exe	118
PID 4648 wrote to memory of 2912	4648	cmd.exe	119
PID 4648 wrote to memory of 2912	4648	cmd.exe	119

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\[[[[..bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:4648
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:648
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4120
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:2028
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:2104
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:4296
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:3648
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:3968
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:3000
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4744
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:4980
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:5076
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:5028
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:2752
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:1644
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:4784
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:568
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:1944
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:3688
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:3536
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:4340
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:2732
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:2836
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4160
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:384
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:1984
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:3376
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:3476
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:4216
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:1304
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4000
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:5092
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:2912
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:2648
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:4796
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:4964
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:3064
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:3684
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:644
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:952
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:756
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:4640
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:1452
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:3440
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4144
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:3120
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:1828
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:988
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:4412
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:944
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:4484
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4092
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:1980
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:3644
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:4532
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:4772
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:4344
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:436
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:3504
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:4864
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:4564
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:4968
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:1516
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:1164
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:3864
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4176
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:1972
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:1572
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:4220
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:3396
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:4268
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:5008
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4036
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:1156
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:4392
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:2296
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:3952
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:4376
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:4984
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:2280
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:1812
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:4660
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:4892
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:576
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:3004
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:4272
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:2816
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:4172
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:4216
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:3912
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:1388
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:1364
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:2896
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:2924
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:1576
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:388
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:4904
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:5084
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:2128
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:4452
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4896
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:3708
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:4576
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:2512
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:1288
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:4304
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:216
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4636
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:3308
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:2860
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:4568
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:1660
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:1552
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:752
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:824
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:3724
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:4680
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:3828
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:4204
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:2472
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:4228
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:2276
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:4608
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:3448
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:1344
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:1488
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:4476
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:4120
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:2704
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:2104
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:3056
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:2640
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:4392
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:2296
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:3952
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:2236
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:1520
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:4712
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:3696
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:4560
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:1368
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:2644
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:3004
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:936
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:3764
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:2816
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:4172
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:4216
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:3912
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:1580
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:1692
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:3924
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:2248
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:5040
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:1596
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:2896
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:496
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:4596
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:1788
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:4148
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:4144
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:4452
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:4896
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4576
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:2512
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:1288
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:4304
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:4856
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:4156
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:4652
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:3272
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:3812
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:4620
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:3336
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:1140
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:3868
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:4540
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:3508
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:5076
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:3244
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:3384
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:2736
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:3124
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:3876
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4220
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:4936
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:1016
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:648
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:1100
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:2208
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:3236
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4084
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:4524
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:4120
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:2704
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:2104
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:1160
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:1724
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:1816
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:4292
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:4888
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:3164
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:5028
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:4744
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:1652
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:2764
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:1900
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:1316
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:3516
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:2264
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:2644
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:3356
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:1696
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:3488
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:632
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:3268
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:4000
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:3760
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:5092
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4436
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:3028
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:1072
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:4756
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:3104
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:1148
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:2336
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:2192
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:2924
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:2896
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:496
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:4596
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:1788
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:4148
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4144
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:4452
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:1424
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:1292
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:1056
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:3068
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:380
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:2096
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:3024
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:436
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:2000
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:1476
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:2608
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:4616
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:2484
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:4044
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:4724
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:396
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:2820
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:1936
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:1224
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4992
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:4340
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:2752
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:4136
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:5104
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:3676
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:824
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:3992
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:1160
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:3968
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:780
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:3652
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:4472
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:3952
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4820
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:2128
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:1328
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:4144
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:4452
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:4532
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:1308
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:2608
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:400
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:4616
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:2484
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:4044
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:4724
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:396
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:1664
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:3260
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:4900
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:4884
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:3508
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:4768
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:1572
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4228
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:2628
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:2736
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:2824
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:2276
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:184
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:1156
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:1516
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:4296
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:100
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:3648
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:4308
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:4920
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:1068
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4744
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:4784
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:568
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:1908
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:4164
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:4188
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:4380
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4760
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:1428
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:3484
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:3396
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:648
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:372
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:2076
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4608
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:1108
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:416
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:1316
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:1592
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:3204
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:936
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:2644
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:3028
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:4408
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:5040
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:1596
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:4072
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:1364
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:388
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:4904
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:3952
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:4640
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:3752
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:2528
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:1832
- C:\Windows\system32\msg.exe
  msg * Press Ctrl+C to exit.
  2⤵
  PID:4144
- C:\Windows\system32\msg.exe
  msg * you have successfully downloaded porn
  2⤵
  PID:4092
- C:\Windows\system32\msg.exe
  msg * you are retarded
  2⤵
  PID:1508
- C:\Windows\system32\msg.exe
  msg * please kys now u worthless pedo
  2⤵
  PID:2192
- C:\Windows\system32\msg.exe
  msg * what would your mother think?
  2⤵
  PID:952
- C:\Windows\system32\msg.exe
  msg * tell your family I said hey
  2⤵
  PID:380
- C:\Windows\system32\timeout.exe
  timeout 3
  2⤵
  - Delays execution with timeout.exe
  PID:472

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads