70de9a51771b17acd290298997396a56209945f452426a8df65160845f4d1c4f | Triage

Analysis

max time kernel
139s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
20/07/2024, 21:28

Sharing

Report Analysis Logs

General

Target

pingers/GGSkid.bat
Size

685B
MD5

62785f7cc7be2f25ae05dc93d5cc61e3
SHA1

653414a880b8d68e05af98dd3694a6824b0afbcd
SHA256

9056c0c3f67d4d431dd983bec1394842f58c5830a687184290f7981e3c3588f8
SHA512

dad5ce2b40aeb91d50b01118f0ba18d63ed21bec5b45ae630372ecd2657a2fafed1b4134a1242ad1eb4db5c67e1f2e78e6cf68fd359c8f745f14802cf127c76e

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 5044 wrote to memory of 4640	5044	cmd.exe	85
PID 5044 wrote to memory of 4640	5044	cmd.exe	85
PID 5044 wrote to memory of 1760	5044	cmd.exe	86
PID 5044 wrote to memory of 1760	5044	cmd.exe	86

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\pingers\GGSkid.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:5044
- C:\Windows\system32\chcp.com
  chcp 65001
  2⤵
  PID:4640
- C:\Windows\system32\mode.com
  mode con lines=7 cols=23
  2⤵
  PID:1760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads