52f6135ec43ae79b427df6f80f135223611d5aa7db01072412620e708a17c3f2 | Triage

Analysis

max time kernel
139s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
01/05/2024, 22:54

Sharing

Report Analysis Logs

General

Target

mset9.bat
Size

246B
MD5

c346349f2d5fef432802a447453e3993
SHA1

8a51f4a72c286ee525290e06e4785d24263ff8af
SHA256

617a3788fe6a2a5dada62e0e5b9f128787d559961b5d9459267e7f95f888c47b
SHA512

c4b184d3a38d389f8dceb32cac0d4312b0fe146400a15df9ea3bcf12b9f356126aa966b98887a3bfdfcd92e89d681b229e45173f42a8ae4dbeec6bdadc952bef

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4168 wrote to memory of 672	4168	cmd.exe	86
PID 4168 wrote to memory of 672	4168	cmd.exe	86

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\mset9.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:4168
- C:\Windows\system32\chcp.com
  chcp 65001
  2⤵
  PID:672

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads