3264d09d3a398417226b7d346c2fc4757ffa445373763e2d7c2f18ef6edb2354 | Triage

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
18-10-2024 17:21

Sharing

Report Analysis Logs

General

Target

Manage.bat
Size

289B
MD5

3b001f8d88211bf2f64a1fbd7cfc22a4
SHA1

f27eec327bc4689848fcda18bf88402d649143c2
SHA256

303666e8136c8f5d1471f503dfa7ba32e5ac303f3b758a8af6a80cc7fdd61253
SHA512

2a94b1311fad0a408773ec30851f1a68d525b0db9a185865c1faf209eb1e6d8f8768ce35051e245b17e468714e645c2553898a833090e1ccb56db56e9bf2c4c3

Score

1^/10

Malware Config

Signatures

Delays execution with timeout.exe 1 IoCs
evasion

Processes:

timeout.exe

pid process

2972 timeout.exe

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

cmd.exe

description	pid	process	target process
PID 2556 wrote to memory of 2972	2556	cmd.exe	timeout.exe
PID 2556 wrote to memory of 2972	2556	cmd.exe	timeout.exe
PID 2556 wrote to memory of 2972	2556	cmd.exe	timeout.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Manage.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2556
- C:\Windows\system32\timeout.exe
  timeout /t 5
  2⤵
  - Delays execution with timeout.exe
  PID:2972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads