1303791d5361f853607ab0e98fc6f102c7ac3585358d680a05f20c7f365c302c

Resubmissions

11/05/2024, 16:53

11/05/2024, 16:51

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
11/05/2024, 16:53

Target
Skiioh's Performance Pack v2 (FREE)/(1) Run This First SkiiohTweaks.bat
Size 9KB
Sample240511-veee1sbb25
SHA256 d3ece4857950aafc233a8bc1b76d9e6b17610ef7f9e00fef19f8cf25967b6aab
MD5 aa57b1f3525fc48b2ea2f103fe22b72e
SHA1 549243c0c1ab4359dbae18292d8d42ee4eab6d31
SHA512 5d99bb07c5f48b6e6aaa74649ea1cebb6648b9311c6d9bc585e93b086966235909bc33f64b2da26c43ca98fd61e113e21e18a9eb66ba1667c5de48d456acbe3e
SSDEEP 192:xbHzjjLiNfAdS5xHiotxnOvcLJCiHMI+IW:9T+NTOm5MI+IW
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 2004 wrote to memory of 2668	2004	cmd.exe	29
PID 2004 wrote to memory of 2668	2004	cmd.exe	29
PID 2004 wrote to memory of 2668	2004	cmd.exe	29
PID 2668 wrote to memory of 1068	2668	cmd.exe	30
PID 2668 wrote to memory of 1068	2668	cmd.exe	30
PID 2668 wrote to memory of 1068	2668	cmd.exe	30
PID 2004 wrote to memory of 2144	2004	cmd.exe	31
PID 2004 wrote to memory of 2144	2004	cmd.exe	31
PID 2004 wrote to memory of 2144	2004	cmd.exe	31
PID 2004 wrote to memory of 2944	2004	cmd.exe	32
PID 2004 wrote to memory of 2944	2004	cmd.exe	32
PID 2004 wrote to memory of 2944	2004	cmd.exe	32

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Skiioh's Performance Pack v2 (FREE)\(1) Run This First SkiiohTweaks.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2004
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c chcp
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2668
- - C:\Windows\system32\chcp.com
    chcp
    3⤵
    PID:1068
- C:\Windows\system32\chcp.com
  chcp 708
  2⤵
  PID:2144
- C:\Windows\system32\cmd.exe
  cmd /c ""C:\Users\Admin\AppData\Local\Temp\Skiioh's Performance Pack v2 (FREE)\(1) Run This First SkiiohTweaks.bat" "
  2⤵
  PID:2944