Analysis

  • max time kernel
    19s
  • max time network
    17s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    22-05-2024 22:25

General

  • Target

    GDCQ-GEN3.bat

  • Size

    5KB

  • MD5

    54bca8cdd30ff23340602bff6bf883c1

  • SHA1

    1fdedd043c040ca31f1da3d1734c482fc6dfe94d

  • SHA256

    9eaf5462868edbfec496657e75ad3c5875352f5279c0fee03e2b7baf01c03b72

  • SHA512

    3b4494a22dbf6dfe56475e4011c2b6362a8dbb4efbe735885a81a9538a91ae37950b9420461a32f5e26726830d97ae0fa1f13c0fec5d9031e7f61551597d795e

  • SSDEEP

    48:6RqSQp7VwjS0zmezuYbo7OTEh3i9flrqPiRNi99MKcCfVYQu02H746+6cT:6RqSTS0iuuvyeyzrZNicK8ER

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\GDCQ-GEN3.bat"
    1⤵
      PID:168
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:2112
      • C:\Windows\system32\NOTEPAD.EXE
        "C:\Windows\system32\NOTEPAD.EXE" C:\support\DomainQueryResults\script-log.txt
        1⤵
          PID:5096

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\support\DomainQueryResults\script-log.txt

          Filesize

          22B

          MD5

          3d7d5bfc2f9302576fd64d0f80b9bc0d

          SHA1

          df8e07f4972a13c079cd5fe281e96bb5b954440c

          SHA256

          c7809c382e7cd7258b7f416d3be6782d2816cc4ba03347e298a575444805294a

          SHA512

          52f564f30715b2c68ea98fcf2c1d12d7b3aaf6939fd11cf3ad103fc8bd4053eb151d8e26b6f11d1724304d67b933c0e4f46ae0bf2fe3a3276751a60dfb08976c