5ce9e6d1e11c658631f427b384d27dc366dea29dd4f33d2c874bea7cb78273f9 | Triage

Analysis

max time kernel
93s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
16/07/2024, 09:39

Sharing

Report Analysis Logs

General

Target

batch/pmp-avc-aac.bat
Size

451B
MD5

8210ad8241584451d089a9c4043b6ff6
SHA1

9b4d4eb4e96577b87b39041472aceddfb24dd3a9
SHA256

01b413cc7f73d9c7aa245582c5795c3ba5a7a4c1c347b7769365b44927d20227
SHA512

01158b69faa3f89d7d094fc1bcff9fbab7c3a367064d2d8f48f0fd6dffb73a15482e5873ea682c18c787ad90cd2472717fb0239d0a54139ceac3b47e4179fdde

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 3472 wrote to memory of 1384	3472	cmd.exe	86
PID 3472 wrote to memory of 1384	3472	cmd.exe	86

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\batch\pmp-avc-aac.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:3472
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c avidump "" | find "Video frame rate"
  2⤵
  PID:1384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads