a1ba54ff4caa32012659f9dd14d64658824ec0065d4fc8d76fe2e821cfbb0aa4 | Triage

Analysis

max time kernel
1s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
24/04/2024, 03:55

Sharing

Report Analysis Logs

General

Target

BEForcer2.3.bat
Size

3KB
MD5

a0cf039ddc1fc8aeb0bf307f19727f7c
SHA1

5c2c8098e5051fb9b84e271bfcd243a46a0d9112
SHA256

a1ba54ff4caa32012659f9dd14d64658824ec0065d4fc8d76fe2e821cfbb0aa4
SHA512

589f948e3ff160919bf51e5bf32bbb573a57c66a03ce36474b0a0b4619cc87ea3428ac64e49064f75ccc160ebf76023640453e1bcd8f1a9c82ed59ed27e09d93

Score

1^/10

Malware Config

Signatures

Delays execution with timeout.exe 1 IoCs

pid	Process
3776	timeout.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4116 wrote to memory of 3776	4116	cmd.exe	80
PID 4116 wrote to memory of 3776	4116	cmd.exe	80

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\BEForcer2.3.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:4116
- C:\Windows\system32\timeout.exe
  timeout /t 1 /NOBREAK
  2⤵
  - Delays execution with timeout.exe
  PID:3776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads