6f78a9ec4dde9902a9eafe74d46d3807c1807323202ae51f54bf1c3874bbac77 | Triage

Analysis

max time kernel
138s
max time network
166s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
30-03-2024 23:04

Sharing

Report Analysis Logs

General

Target

sss/Install/del.bat
Size

315B
MD5

155557517f00f2afc5400ba9dc25308e
SHA1

77a53a8ae146cf1ade1c9d55bbd862cbeb6db940
SHA256

f00d027b0ed99814846378065b3da90d72d76307d37b7be46f5a480f425a764e
SHA512

40baee6e6b22c386886d89172ad7c17605166f992f2d364c68d90b9874ab6f7b85e0accc91e83b4fbd2ae702def365f23542f22f6be7ff2f7949496cc0ba8a32

Score

1^/10

Malware Config

Signatures

Delays execution with timeout.exe 1 IoCs

pid	Process
3672	timeout.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4048 wrote to memory of 3672	4048	cmd.exe	86
PID 4048 wrote to memory of 3672	4048	cmd.exe	86

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\sss\Install\del.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:4048
- C:\Windows\system32\timeout.exe
  timeout 5
  2⤵
  - Delays execution with timeout.exe
  PID:3672

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads