Analysis

  • max time kernel
    432s
  • max time network
    436s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240730-en
  • resource tags

    arch:x64arch:x86image:win11-20240730-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    01-08-2024 20:53

General

  • Target

    Data/move.bat

  • Size

    37B

  • MD5

    1dc4e793875d58a31b6436c3f532fff6

  • SHA1

    5b5514842c6020cba9a9f4f7468ffd9d03d7b281

  • SHA256

    202070e706ad43ba8b66332c72b3829ac6c885ee08be74bf089f3af270b83efb

  • SHA512

    21e145b911519bf26cd32353fb04c448695efa51a6ff213d511f34ca4b25afd3bcdd06a1d580e5f0cc8c2c692019175975aea25675079757e3eb2849989b2956

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Data\move.bat"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2896
    • C:\Windows\system32\xcopy.exe
      xcopy "C:\Users\Admin\AppData\Local\Temp\Data\TempDatapack" /s /q /y
      2⤵
        PID:4168

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads