1e8ac27113f83032a0f1766e0939bd7fc9523e13f6df37d5892ea381ce98d93b | Triage

Analysis

max time kernel
93s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
21/08/2024, 22:12

Sharing

Report Analysis Logs

General

Target

TCP.bat
Size

1KB
MD5

7648abf9b45aa6c2c58d07fc4dc6ca0e
SHA1

9b9d52f1a6582384fa129efa329fd95849f85aff
SHA256

1e8ac27113f83032a0f1766e0939bd7fc9523e13f6df37d5892ea381ce98d93b
SHA512

3faa8acfbe9e5401db6961eaf51d47424fcac50b727482fa5942dc4ed0a4b5aa19ce55fbf1cb7411d3cb508431dcf89e3db1d29ffa5a411b50aae7ba7894ca6b

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 2296 wrote to memory of 764	2296	cmd.exe	82
PID 2296 wrote to memory of 764	2296	cmd.exe	82

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\TCP.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2296
- C:\Windows\system32\chcp.com
  chcp 65001
  2⤵
  PID:764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads