67001c8f5a37c1ccd2d1750f21e28d372a8639c330aafbae111a5956c942b71a | Triage

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
15-03-2024 09:30

Sharing

Report Analysis Logs

General

Target

driver/vista64/install_silent.bat
Size

17B
MD5

262b5c4496a902ebe2e5659b763766c4
SHA1

2dfcbd32ec44e0e15628cfeda38d9d5ca4df0ab8
SHA256

15af5763e85b2250dd1d00ed3ab051a69f3dd00cd679f7646ff34f18ed867476
SHA512

c7ff7eba5a3e9c49cadaefb7f1c608871dcfca2b38e0befbe6335eb0559043ba901331337282e3fbf318135fc9a22ed7100f645e0185327e01fc2fb1fd783795

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 3840 wrote to memory of 3452	3840	cmd.exe	90
PID 3840 wrote to memory of 3452	3840	cmd.exe	90

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\driver\vista64\install_silent.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:3840
- C:\Users\Admin\AppData\Local\Temp\driver\vista64\setupdrv.exe
  setupdrv installs
  2⤵
  PID:3452

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads