Analysis

  • max time kernel
    121s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    29-08-2024 06:34

General

  • Target

    PAIcom/PAIcom/smug.bat

  • Size

    43B

  • MD5

    976cacad1d9c690f63b5450f5e79bc3b

  • SHA1

    c08734f1383c762e394004aeb4b67d4553c74601

  • SHA256

    8e15940c3bde3e855b964a1c265cf19847f1e11138e1c49dcd7e059f19a81c90

  • SHA512

    98235c28da1bd9dc8522bce40ae929b9635f98495c092883406b1245d7293728810a8c5c3a6f8a7d6ba718e73a97019ddb3399f9f0a42ff7c50f671b4db6b27e

Score
1/10

Malware Config

Signatures

  • Kills process with taskkill 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\PAIcom\PAIcom\smug.bat"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:588
    • C:\Windows\system32\taskkill.exe
      taskkill /im 720.exe
      2⤵
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:2496
    • C:\Windows\system32\taskkill.exe
      taskkill /im 1080.exe
      2⤵
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:3036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads