Analysis
-
max time kernel
148s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
18-01-2024 08:54
General
-
Target
Configurar.cmd
-
Size
30B
-
MD5
0872989105f448cfe9265f031357f1f2
-
SHA1
80a267002ce6fc193cc3e6289e21a3c6ac27174d
-
SHA256
35bdff29e226f5fc3d0e3dc4cb4a63936818b3b6cad4717a015a9f951149fb71
-
SHA512
179c1bb6ca81b770e8293ea1474c83416119278881d7f4e1bb6e193712225b44996e4f5fb46178b0d27215e7cd4d391ee96f3f4c138056d891d4314e6c9691aa
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Configurar.cmd"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\TNrgyModbusServer.exeTNrgyModbusServer.exe config2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
18B
MD517866755e608b82db866404a203988cd
SHA1cc29169e00fe92c5e507017d69dab0aadf96bc8d
SHA2562e3fdab78b0b8bd0b4f8abc59bfeb06001d72d6b5c8411ccf9259e14db0fc8b4
SHA512538919ed48dff04535cb8f0ddae4cc540b0f3549ed151398b23a25c19fae8722846bbc0c43c19adac7925d751c494451e1b6bc180e9b875d99e7b90dc15f5abe
-
Filesize
64KB
-
Filesize
7.7MB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
136KB
-
Filesize
496KB
-
Filesize
3.3MB
-
Filesize
304KB
-
Filesize
64KB
-
Filesize
1.2MB
-
Filesize
64KB
-
Filesize
104KB
-
Filesize
136KB
-
Filesize
132KB
-
Filesize
240KB
-
Filesize
7.7MB
-
Filesize
1.2MB
-
Filesize
120KB
-
Filesize
64KB
-
Filesize
40KB