a3284cc578ebc34f1fa85b5292de9c897fb48299de1225b3b2759f15ee5c57ec | Triage

Analysis

max time kernel
118s
max time network
17s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
05/08/2024, 22:45

Sharing

Report Analysis Logs

General

Target

Arc fix.bat
Size

252B
MD5

7e51b6fe7919b6a0c8138600ce1005b4
SHA1

4e63ce93b48fc9384c2f7917d48b991059b5326d
SHA256

a3284cc578ebc34f1fa85b5292de9c897fb48299de1225b3b2759f15ee5c57ec
SHA512

47643959a3823a1111ade6900734dd4f148f89697d83c4552dee16ed269afa7190f465f49560d06fb4851361663486f06f05994758fb54d34ec943c9c89bf670

Score

1^/10

Malware Config

Signatures

Delays execution with timeout.exe 1 IoCs

pid	Process
1692	timeout.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2416 wrote to memory of 1692	2416	cmd.exe	31
PID 2416 wrote to memory of 1692	2416	cmd.exe	31
PID 2416 wrote to memory of 1692	2416	cmd.exe	31

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Arc fix.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2416
- C:\Windows\system32\timeout.exe
  timeout 2
  2⤵
  - Delays execution with timeout.exe
  PID:1692

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads