ac597c69333f99b6d9f7b6deb58c8f19aaee37c6a2fc5c4155559c0531b6ceeb | Triage

Analysis

max time kernel
139s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
15-03-2024 00:23

Sharing

Report Analysis Logs

General

Target

Crack Beast/vCRACK/CMD.bat
Size

56B
MD5

b5aa964ce2b325e57872f79d60ac51f7
SHA1

fb4d777e9c26e605ec497520bee63105d4279665
SHA256

829c02f32e7c84d2b488014b0165cb43e2c6c45fb9028cc43b9d3261976dc93b
SHA512

cac0daf9d792b64a906018ba55124c0232bb1df8a41399e382176ec51984621938c03b51aad12a9c1bacefff7753d8c67fa2f083485559af3ab73aafd98c34c2

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3256	vCRACK.exe
3256	vCRACK.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 3944 wrote to memory of 3256	3944	cmd.exe	96
PID 3944 wrote to memory of 3256	3944	cmd.exe	96
PID 3944 wrote to memory of 3256	3944	cmd.exe	96
PID 3944 wrote to memory of 4644	3944	cmd.exe	102
PID 3944 wrote to memory of 4644	3944	cmd.exe	102

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Crack Beast\vCRACK\CMD.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:3944
- C:\Users\Admin\AppData\Local\Temp\Crack Beast\vCRACK\vCRACK.exe
  vCRACK.exe -h
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3256
- C:\Windows\system32\cmd.exe
  cmd.exe /K "cd /d C:\Users\Admin\AppData\Local\Temp\Crack Beast\vCRACK"
  2⤵
  PID:4644

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1332 --field-trial-handle=3060,i,1774866140584649235,8085848018931772189,262144 --variations-seed-version /prefetch:8
1⤵
PID:3004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads