04337a181a4ae6b42787181b6bd24bf1412c4228a447f78a79d89e5dd2a12ebe | Triage

Analysis

max time kernel
1565s
max time network
1568s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
18-11-2023 13:15

Sharing

Report Analysis Logs

General

Target

Delete2.bat
Size

69B
MD5

d07a95daf60cbb7ac6e7cdc35af95c8c
SHA1

4e70ea6f9689f85dabf4e78ccc22d5582d156ccf
SHA256

04337a181a4ae6b42787181b6bd24bf1412c4228a447f78a79d89e5dd2a12ebe
SHA512

613feaf806dc574b895d2e8f877f1dbd2f405891921cd26a33dc84785508ab08535d38b300792b469b46482cf4aede303b79e484d705085f8242a88bc7c46844

Score

1^/10

Malware Config

Signatures

Delays execution with timeout.exe 1 IoCs

pid	Process
2092	timeout.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2976 wrote to memory of 2092	2976	cmd.exe	29
PID 2976 wrote to memory of 2092	2976	cmd.exe	29
PID 2976 wrote to memory of 2092	2976	cmd.exe	29

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Delete2.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2976
- C:\Windows\system32\timeout.exe
  timeout 5
  2⤵
  - Delays execution with timeout.exe
  PID:2092

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads