6f78a9ec4dde9902a9eafe74d46d3807c1807323202ae51f54bf1c3874bbac77 | Triage

Analysis

max time kernel
118s
max time network
149s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
30-03-2024 23:04

Sharing

Report Analysis Logs

General

Target

sss/Install/del.bat
Size

315B
MD5

155557517f00f2afc5400ba9dc25308e
SHA1

77a53a8ae146cf1ade1c9d55bbd862cbeb6db940
SHA256

f00d027b0ed99814846378065b3da90d72d76307d37b7be46f5a480f425a764e
SHA512

40baee6e6b22c386886d89172ad7c17605166f992f2d364c68d90b9874ab6f7b85e0accc91e83b4fbd2ae702def365f23542f22f6be7ff2f7949496cc0ba8a32

Score

1^/10

Malware Config

Signatures

Delays execution with timeout.exe 1 IoCs

pid	Process
2672	timeout.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2668 wrote to memory of 2672	2668	cmd.exe	30
PID 2668 wrote to memory of 2672	2668	cmd.exe	30
PID 2668 wrote to memory of 2672	2668	cmd.exe	30

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\sss\Install\del.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2668
- C:\Windows\system32\timeout.exe
  timeout 5
  2⤵
  - Delays execution with timeout.exe
  PID:2672

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads