519f0b16537fa4a2bc228cdfce2b85c12225e2071d7789c8cc9bb8f7b85796ca

Analysis

max time kernel
30s
max time network
31s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
12/05/2024, 02:06

Target

Bat_To_Exe_Converter_(Installer).exe
Size

4.3MB
MD5

0d8bedda7d9b963de975685cf2b2a5eb
SHA1

cbbffe900a09e8a3bbb1a1bf16e7aeb8ebde72a1
SHA256

519f0b16537fa4a2bc228cdfce2b85c12225e2071d7789c8cc9bb8f7b85796ca
SHA512

9d8eb3433e88fb47b15d624b493af69a9697eeeee7ccfef71daf04181bcc5ba45b2f9cc801679c0234399fdf80f4a85f20858038c41c11132b515fb76cf22612
SSDEEP

98304:/xQvu6zDf/mV8jYMG2eHlLrTvIpfCnIpMpCEORglqLxjX:/Gv9AMGnHlLrTvIquMiWqLxj

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2812	Bat_To_Exe_Converter_(Installer).tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 116 wrote to memory of 2812	116	Bat_To_Exe_Converter_(Installer).exe	83
PID 116 wrote to memory of 2812	116	Bat_To_Exe_Converter_(Installer).exe	83
PID 116 wrote to memory of 2812	116	Bat_To_Exe_Converter_(Installer).exe	83

C:\Users\Admin\AppData\Local\Temp\Bat_To_Exe_Converter_(Installer).exe
"C:\Users\Admin\AppData\Local\Temp\Bat_To_Exe_Converter_(Installer).exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:116
- C:\Users\Admin\AppData\Local\Temp\is-41C33.tmp\Bat_To_Exe_Converter_(Installer).tmp
  "C:\Users\Admin\AppData\Local\Temp\is-41C33.tmp\Bat_To_Exe_Converter_(Installer).tmp" /SL5="$401E6,4092287,121344,C:\Users\Admin\AppData\Local\Temp\Bat_To_Exe_Converter_(Installer).exe"
  2⤵
  - Executes dropped EXE
  PID:2812

C:\Users\Admin\AppData\Local\Temp\is-41C33.tmp\Bat_To_Exe_Converter_(Installer).tmp

Filesize
1.1MB

MD5
90fc739c83cd19766acb562c66a7d0e2

SHA1
451f385a53d5fed15e7649e7891e05f231ef549a

SHA256
821bd11693bf4b4b2b9f3c196036e1f4902abd95fb26873ea6c43e123b8c9431

SHA512
4cb11ad48b7585ef1b70fac9e3c25610b2f64a16358cd51e32adcb0b17a6ab1c934aeb10adaa8e9ddf69b2e2f1d18fe2e87b49b39f89b05ea13aa3205e41296c

Download Submit
memory/116-0-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/116-2-0x0000000000401000-0x0000000000412000-memory.dmp

Filesize
68KB

Download
memory/116-8-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2812-6-0x0000000000400000-0x000000000052D000-memory.dmp

Filesize
1.2MB

Download
memory/2812-9-0x0000000000400000-0x000000000052D000-memory.dmp

Filesize
1.2MB

Download