522760375f0240fbff753636e1de3f3e8b94e061a7fed12e53834f5114f2d58c | Triage

Analysis

max time kernel
0s
platform
windows11-21h2_x64
resource
win11-20240419-en
resource tags

arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system
submitted
05/06/2024, 20:32

Sharing

Report Analysis Logs

General

Target

GameMode.bat
Size

778B
MD5

f74d47f39a6531f48cdaceb83dd8e5ce
SHA1

e68a1ef5040420accb172e951016aa3590886484
SHA256

522760375f0240fbff753636e1de3f3e8b94e061a7fed12e53834f5114f2d58c
SHA512

6c2dfb7d421208046384929a19d43d42a68c9513df4beff86d686fbe1c0352c1d8c55ee1b5b6c90deba009e3e7c2d4dec38bdc4f0791139a65b45b1d5f47dd7e

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 3904 wrote to memory of 2072	3904	cmd.exe	80
PID 3904 wrote to memory of 2072	3904	cmd.exe	80

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\GameMode.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:3904
- C:\Windows\system32\mode.com
  mode 80,20
  2⤵
  PID:2072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads