516e51448bb334d7d89a420d67c2bdc72bb6b5a17beb442b128d0ea02837ea26 | Triage

Analysis

max time kernel
11s
max time network
13s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10-04-2024 09:59

Sharing

Report Analysis Logs

General

Target

Uninstall-Spotify.bat
Size

949B
MD5

b744db9628f290f97c4919a920502639
SHA1

1d5da464baffed8183544708da8e822f6fe62b1b
SHA256

516e51448bb334d7d89a420d67c2bdc72bb6b5a17beb442b128d0ea02837ea26
SHA512

7d12016dba36bf371f7ab170638f74f072b104331e7fa2991442814ec6789141542730695219d6790ba327caa3ab0f30883bae22a7fc3fa99d7e6bbf33ca3c7d

Score

1^/10

Malware Config

Signatures

Delays execution with timeout.exe 1 IoCs

pid	Process
3992	timeout.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 2180 wrote to memory of 3992	2180	cmd.exe	86
PID 2180 wrote to memory of 3992	2180	cmd.exe	86

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Uninstall-Spotify.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2180
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:3992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads