602c6f00b436b691132d4027139c2c6a4cf37604c9991bfc7771a76782bc3762 | Triage

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24/05/2024, 12:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

zap.bat
Size

188B
MD5

4a5cbe5176fd030a6f863c13b8a0a27f
SHA1

b1c6cd85c31a935e5ecb504a1e7eb137a865da4b
SHA256

602c6f00b436b691132d4027139c2c6a4cf37604c9991bfc7771a76782bc3762
SHA512

3b8851d2a156efd86892f77b152392235b392e224e5a64d696fc180c4587f353eee3ba5031c9ace5315e6b89c7c48250a6be73ba1cd1c803290fd2e512e2e707

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1460 wrote to memory of 2932	1460	cmd.exe	29
PID 1460 wrote to memory of 2932	1460	cmd.exe	29
PID 1460 wrote to memory of 2932	1460	cmd.exe	29

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\zap.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:1460
- C:\Windows\system32\java.exe
  java -Xmx512m -jar zap-2.14.0.jar
  2⤵
  PID:2932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads