26f07e440dfd3b8b410fdd75ec04595b79c57e8be2a13c14dd746840ff33983c

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
11/09/2024, 11:23

Target

ToX_Free_Utility_v1.8.bat
Size

96KB
MD5

77833823ecd3754d0099e019f7e885d0
SHA1

e65494c444f7c42032372a09e1179c6f6950ae24
SHA256

26f07e440dfd3b8b410fdd75ec04595b79c57e8be2a13c14dd746840ff33983c
SHA512

52f951f9f253af8499538d810f53242f32c24c7f6b27d8ef76abf2c8c8b1c8e7d31e0b3a7c52ad70fdd1f41a54fa023b21fde7bea24942fa6bf61afb4dd95547
SSDEEP

768:SXQO3gNjy0y7PHYW9CyptHDXxRSyeVlEeOh/853gzI1vavQw8gsQmVHQQCHQVbOy:GQTgvptHriyd017wIUS

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2220 wrote to memory of 2512	2220	cmd.exe	31
PID 2220 wrote to memory of 2512	2220	cmd.exe	31
PID 2220 wrote to memory of 2512	2220	cmd.exe	31

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\ToX_Free_Utility_v1.8.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2220
- C:\Windows\system32\chcp.com
  chcp 65001
  2⤵
  PID:2512