6f78a9ec4dde9902a9eafe74d46d3807c1807323202ae51f54bf1c3874bbac77 | Triage

Analysis

max time kernel
57s
max time network
42s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
30-03-2024 23:04

Sharing

Report Analysis Logs

General

Target

sss/Install/Delete.bat
Size

73B
MD5

a7156985a69a520857d07818b2161bec
SHA1

4ca34541f48f4811aaba2a49d63a7b76bf7ba05e
SHA256

bb4810e0f1e95012705f20e78fdc63a57917a9f3d848520e4f3f2a7975dbdbe9
SHA512

5a46596f08a32b246573e24896b1407d4b747eef9722a45be20084d50939cf2d9417793e3a83e7edd91587cfbda1074a9ea7539a73b6f991b233210ca638247b

Score

1^/10

Malware Config

Signatures

Delays execution with timeout.exe 1 IoCs

pid	Process
2528	timeout.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2416 wrote to memory of 2528	2416	cmd.exe	31
PID 2416 wrote to memory of 2528	2416	cmd.exe	31
PID 2416 wrote to memory of 2528	2416	cmd.exe	31

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\sss\Install\Delete.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2416
- C:\Windows\system32\timeout.exe
  timeout 5
  2⤵
  - Delays execution with timeout.exe
  PID:2528

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads