4a969777a8f5e858b721c45a6415a6862fed9e5a9f7e86fb527003f83cd713cf | Triage

Analysis

max time kernel
97s
max time network
99s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
31/05/2024, 06:50

Sharing

Report Analysis Logs

General

Target

Feather_fixer_V2.00.bat
Size

5KB
MD5

adad94bcacb63e3a205d8cde7cadff0f
SHA1

4ef54e402c0099ee9b2f618977ce90233ecaaf7d
SHA256

4a969777a8f5e858b721c45a6415a6862fed9e5a9f7e86fb527003f83cd713cf
SHA512

9056c8b2ff9d7a85339a9f1987f3d2abd5fb9e07bbc75f18b6e4a865e2078950ec1e4ebaaab0f3169c413691a1f482570f031e980b088787d10f8d793d9d79d8
SSDEEP

96:iHNlMpjg5HZyAbiFst9/KgpIjdiEn+tFp4I/06Mql:iHfWQKBj/+R0/W

Score

1^/10

Malware Config

Signatures

Delays execution with timeout.exe 1 IoCs

pid	Process
3748	timeout.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 3820 wrote to memory of 3748	3820	cmd.exe	90
PID 3820 wrote to memory of 3748	3820	cmd.exe	90

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Feather_fixer_V2.00.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:3820
- C:\Windows\system32\timeout.exe
  timeout /t 4
  2⤵
  - Delays execution with timeout.exe
  PID:3748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads