1e4a3728964bb563b80ee9b4ff95b4e97ca3e80b1daf7d41c8c967617e36ca7d | Triage

Analysis

max time kernel
91s
max time network
118s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
15-04-2024 05:05

Sharing

Report Analysis Logs

General

Target

JamessJ.bat
Size

1KB
MD5

85144ac8c4cf3a68eadca7d4077d1b9c
SHA1

c0bc8a9305838f1a74b66326e5823478b92cfdc7
SHA256

1e4a3728964bb563b80ee9b4ff95b4e97ca3e80b1daf7d41c8c967617e36ca7d
SHA512

041dceadfaf81f820affac2aef77c0881c524e04de902aef7d975d48806628805e487d408cbf58af1065d0d1befc210c7e197e4e7d5092cabdb88bc01ccd6985

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 1736 wrote to memory of 4484	1736	cmd.exe	85
PID 1736 wrote to memory of 4484	1736	cmd.exe	85

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\JamessJ.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:1736
- C:\Windows\system32\mode.com
  mode con: cols=20 lines=1
  2⤵
  PID:4484

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads