d0d6cabab10e62f0261e2ca13daa453b4ec38c9f81880a55d1aca04c8ae5a3fa

Analysis

max time kernel
30s
max time network
29s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
28/03/2024, 00:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Launcher.bat
Size

544B
MD5

17033b44988e812ebade9022cba3584f
SHA1

3c98c9f36212cfeec679057cabb1ea5d4bffb1a1
SHA256

deda21bef6613c01484a7c219070f1c510d96a31373a9561e31a8e45b3c94473
SHA512

9f54c72cafeedb4b332e8c4d438e88475d1757ea4ffdf23d13d0f1bae55806b3fe58cf48002085f5a867c5d8906c4b7674584c4070288e35026037cdc33eb282

Score

6^/10

Malware Config

Signatures

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
3	ip-api.com

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 400 wrote to memory of 4984	400	cmd.exe	86
PID 400 wrote to memory of 4984	400	cmd.exe	86
PID 400 wrote to memory of 452	400	cmd.exe	87
PID 400 wrote to memory of 452	400	cmd.exe	87
PID 400 wrote to memory of 452	400	cmd.exe	87

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Launcher.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:400
- C:\Windows\system32\cacls.exe
  "C:\Windows\system32\cacls.exe" "C:\Windows\system32\config\system"
  2⤵
  PID:4984
- C:\Users\Admin\AppData\Local\Temp\compiler.exe
  compiler.exe config
  2⤵
  PID:452

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/452-1-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-0-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-2-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-3-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-4-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-6-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-5-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-7-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-8-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-9-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-10-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-11-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-12-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-13-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-14-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-15-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-16-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-17-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-18-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-19-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-20-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-22-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-21-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-23-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-24-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-25-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-26-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-27-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-29-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-28-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-30-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-31-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-32-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-33-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-34-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-35-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-36-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-37-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-38-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-39-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-41-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-40-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-42-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-43-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-44-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-45-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-46-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-47-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-48-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-49-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-50-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-51-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-52-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-53-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-54-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-55-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-56-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-57-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-58-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-59-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-60-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-61-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-62-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download
memory/452-63-0x000000007F3D0000-0x000000007F3E0000-memory.dmp

Filesize
64KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads