9235d2676794ff9cc054258ec08e894647ed0112a94f078c9b901d8f1aa049ce | Triage

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
08/09/2024, 12:02

Sharing

Report Analysis Logs

General

Target

Files/GPEE.bat
Size

801B
MD5

462499abd2275776b3e6c6beeb86b0c9
SHA1

ba3e380c5d1d24f7c1eacdb1c4a82d1a14f2dbae
SHA256

50082e6e1f85c84a4ae2e34502f3103d82510223f90599d329c90835fda99439
SHA512

586b34eb38d380a1c03a01bd8c477eaddaf99a9a22cc9b0a3b57965ee5b203d46497d510292e401da909fc0a3811a1f7fccc69a387936d4a9b5fd3c2f9d2120b

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2380 wrote to memory of 3028	2380	cmd.exe	31
PID 2380 wrote to memory of 3028	2380	cmd.exe	31
PID 2380 wrote to memory of 3028	2380	cmd.exe	31

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Files\GPEE.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2380
- C:\Windows\system32\fltMC.exe
  fltmc
  2⤵
  PID:3028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads