Analysis

  • max time kernel
    127s
  • max time network
    135s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    29/05/2024, 14:15

General

  • Target

    BombPartyUltra/ARunALL.bat

  • Size

    258B

  • MD5

    029f5024b664f3a1ea300e4466f1aee9

  • SHA1

    159fbedbe664ec1a228a7ffba3bb0dd259b485d6

  • SHA256

    e4c605580569e3d676b711ffc95f43ce8e91b3edef75d71c5a84433500169f87

  • SHA512

    b8ebe5bbfd2cd9ac4ed2e94003eb4c7a26dbb82c8922a4c13e9d072188a17190dad836dcf48b9370bca279f26e389c06480a2bb1b0f33f7187e61ed6fbb41b0b

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\BombPartyUltra\ARunALL.bat"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5116
    • C:\Windows\system32\mode.com
      mode con: cols=185 lines=30
      2⤵
        PID:3252

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads