04337a181a4ae6b42787181b6bd24bf1412c4228a447f78a79d89e5dd2a12ebe | Triage

Analysis

max time kernel
314s
max time network
1589s
platform
windows10-1703_x64
resource
win10-20231020-en
resource tags

arch:x64arch:x86image:win10-20231020-enlocale:en-usos:windows10-1703-x64system
submitted
18/11/2023, 13:15

Sharing

Report Analysis Logs

General

Target

Delete2.bat
Size

69B
MD5

d07a95daf60cbb7ac6e7cdc35af95c8c
SHA1

4e70ea6f9689f85dabf4e78ccc22d5582d156ccf
SHA256

04337a181a4ae6b42787181b6bd24bf1412c4228a447f78a79d89e5dd2a12ebe
SHA512

613feaf806dc574b895d2e8f877f1dbd2f405891921cd26a33dc84785508ab08535d38b300792b469b46482cf4aede303b79e484d705085f8242a88bc7c46844

Score

1^/10

Malware Config

Signatures

Delays execution with timeout.exe 1 IoCs

pid	Process
3048	timeout.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 2316 wrote to memory of 3048	2316	cmd.exe	72
PID 2316 wrote to memory of 3048	2316	cmd.exe	72

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Delete2.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2316
- C:\Windows\system32\timeout.exe
  timeout 5
  2⤵
  - Delays execution with timeout.exe
  PID:3048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads