cfccc33ce93b3399b94828a1cae24525b177a5694cdf2672c657e2e96e34f6e3 | Triage

Resubmissions

22-05-2024 20:34

240522-zckapsfe8x 1

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 20:34

Sharing

Report Analysis Logs

General

Target

fucked.bat
Size

188B
MD5

9681dc3202cee6113c6c073a3d1263f2
SHA1

3539584cea812fc4a3ee591e0d03080436df141b
SHA256

cfccc33ce93b3399b94828a1cae24525b177a5694cdf2672c657e2e96e34f6e3
SHA512

8305a90c8cc9d81a91b48327c48e8b68a39c6bb090f8dd2b8f3c46927e3fc75454fe9f498e17bedc8ca9c991748caa0394d1d4345f1782b180f5462017e87619

Score

1^/10

Malware Config

Signatures

Delays execution with timeout.exe 4 IoCs
evasion

Processes:

timeout.exetimeout.exetimeout.exetimeout.exe

pid process

2160 timeout.exe
2288 timeout.exe
3412 timeout.exe
4620 timeout.exe

Suspicious use of WriteProcessMemory 8 IoCs

Processes:

cmd.exe

description	pid	process	target process
PID 1160 wrote to memory of 4620	1160	cmd.exe	timeout.exe
PID 1160 wrote to memory of 4620	1160	cmd.exe	timeout.exe
PID 1160 wrote to memory of 2160	1160	cmd.exe	timeout.exe
PID 1160 wrote to memory of 2160	1160	cmd.exe	timeout.exe
PID 1160 wrote to memory of 2288	1160	cmd.exe	timeout.exe
PID 1160 wrote to memory of 2288	1160	cmd.exe	timeout.exe
PID 1160 wrote to memory of 3412	1160	cmd.exe	timeout.exe
PID 1160 wrote to memory of 3412	1160	cmd.exe	timeout.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\fucked.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:1160

C:\Windows\system32\timeout.exe
timeout /t 3
2⤵
- Delays execution with timeout.exe
PID:4620

C:\Windows\system32\timeout.exe
timeout /t 3
2⤵
- Delays execution with timeout.exe
PID:2160

C:\Windows\system32\timeout.exe
timeout /t 3
2⤵
- Delays execution with timeout.exe
PID:2288

C:\Windows\system32\timeout.exe
timeout /t 3
2⤵
- Delays execution with timeout.exe
PID:3412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads