fc4880ca9e55f57a69fcbc047e67bff7af42db510b00c337235af31858d95beb

Analysis

max time kernel
15s
max time network
22s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
03-08-2024 10:29

Target

AhMyth-master/AhMyth-Client/gradlew.bat
Size

2KB
MD5

0ea6d812cf51675a8503fe23ae178996
SHA1

8751d7831ca6cd1cad48e1475a79596b54b48994
SHA256

f4f428c5626b3d90cef3bd4e7fd3ad3ea5760442db8c09d586b5bfe031dbe5e3
SHA512

ea052888a8e361670cd7051c6313fc838f579a54288ed391361954f413df699c119236e7371149939045cd3aef48458d4991beed579e3cc1230e3bee1273de8f

Score

1^/10

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 3036 wrote to memory of 2160	3036	cmd.exe	31
PID 3036 wrote to memory of 2160	3036	cmd.exe	31
PID 3036 wrote to memory of 2160	3036	cmd.exe	31
PID 3036 wrote to memory of 2656	3036	cmd.exe	32
PID 3036 wrote to memory of 2656	3036	cmd.exe	32
PID 3036 wrote to memory of 2656	3036	cmd.exe	32

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\AhMyth-master\AhMyth-Client\gradlew.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:3036
- C:\Windows\system32\java.exe
  java.exe -version
  2⤵
  PID:2160
- C:\Windows\system32\java.exe
  "java.exe" "-Dorg.gradle.appname=gradlew" -classpath "C:\Users\Admin\AppData\Local\Temp\AhMyth-master\AhMyth-Client\\gradle\wrapper\gradle-wrapper.jar" org.gradle.wrapper.GradleWrapperMain
  2⤵
  PID:2656

memory/2160-2-0x0000000002420000-0x0000000002690000-memory.dmp

Filesize
2.4MB

Download
memory/2160-11-0x0000000001B70000-0x0000000001B71000-memory.dmp

Filesize
4KB

Download
memory/2160-12-0x0000000002420000-0x0000000002690000-memory.dmp

Filesize
2.4MB

Download
memory/2656-15-0x00000000027C0000-0x0000000002A30000-memory.dmp

Filesize
2.4MB

Download
memory/2656-25-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/2656-27-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/2656-28-0x00000000027C0000-0x0000000002A30000-memory.dmp

Filesize
2.4MB

Download