Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    29/09/2024, 05:16

General

  • Target

    docsis_cfg2.0.7/docsis.bat

  • Size

    258B

  • MD5

    f7b4679426f4e4c4b0207046c661bc6c

  • SHA1

    79f01fcfc8ee0a12a2fb116ffb428b02874321fc

  • SHA256

    d2779cbfe6f99303215ba49d7b3d21e23f0cff788f70b1af22b800e28183af54

  • SHA512

    ddb64ac255f2e6792375f18a80d7043c989c1cbd50547d8fb994ea1660443e62e785b2118dddcc5f7aa71952ed847a5a53789da47de77a21fa4eeb4a9b5a38e8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: CmdExeWriteProcessMemorySpam 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\docsis_cfg2.0.7\docsis.bat"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2412
    • C:\Users\Admin\AppData\Local\Temp\docsis_cfg2.0.7\docsis.exe
      docsis.exe
      2⤵
      • Suspicious behavior: CmdExeWriteProcessMemorySpam
      PID:1040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1040-0-0x0000000061000000-0x000000006113C000-memory.dmp

    Filesize

    1.2MB

  • memory/1040-3-0x0000000061000000-0x000000006113C000-memory.dmp

    Filesize

    1.2MB

  • memory/1040-2-0x0000000010000000-0x00000000100DA000-memory.dmp

    Filesize

    872KB

  • memory/1040-1-0x0000000000400000-0x0000000000506000-memory.dmp

    Filesize

    1.0MB