9fd48f4e3cfcf039ad042a5de49084c2e7c50d278e4d165055f5c9c5683a225a | Triage

Resubmissions

29/06/2024, 18:43

240629-xdbzlstbmd 6

29/06/2024, 18:41

240629-xbyqlawfmr 6

Analysis

max time kernel
0s
max time network
0s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
29/06/2024, 18:43

Sharing

Report Analysis Logs

General

Target

ipeepee.bat
Size

784B
MD5

a7cf0b220fa7ad20badb72e7d6bd3e10
SHA1

8937a5dd972b5fc694eb181e9889486133aa1d9a
SHA256

9fd48f4e3cfcf039ad042a5de49084c2e7c50d278e4d165055f5c9c5683a225a
SHA512

e9907a09d339ea40faedd90934a2b8e9bda2232039bcf2744f94c34e5a225f54c3a08e9e5400e837fecd96be663d9654b7b9c0a1cf1c8ad52630431e26c72e9e

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2400 wrote to memory of 2308	2400	cmd.exe	29
PID 2400 wrote to memory of 2308	2400	cmd.exe	29
PID 2400 wrote to memory of 2308	2400	cmd.exe	29

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\ipeepee.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2400
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c curl -s https://ident.me
  2⤵
  PID:2308

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads