47961c394d3b03bd1670e702b2ac59071dc54535657c82772e08e0a2d767b7c4 | Triage

Analysis

max time kernel
430s
max time network
1159s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
10/08/2024, 13:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

mineways/mineways_min_debug.bat
Size

513B
MD5

4d48ccf69ca963a037fbe67dcc86d8b6
SHA1

331af7120284062b4e1b2727510f0149492dbd04
SHA256

0d0742258b42f2833f641b209cd0c9049fb195dff15ef44044d08e8b6c9bc263
SHA512

3f09e5debcf11d11f5fdc4d8de0c25ef761c397d80a9c740ae95792291f88db0e999fda96243958b3999dc858a84d53fc89ed5300c6ddb48251a646c9951dd8b

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 940 wrote to memory of 1852	940	cmd.exe	83
PID 940 wrote to memory of 1852	940	cmd.exe	83

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\mineways\mineways_min_debug.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:940
- C:\Users\Admin\AppData\Local\Temp\mineways\Mineways.exe
  mineways.exe -l mineways_exec.log -s none
  2⤵
  PID:1852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads