3264d09d3a398417226b7d346c2fc4757ffa445373763e2d7c2f18ef6edb2354 | Triage

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
18-10-2024 17:21

Sharing

Report Analysis Logs

General

Target

Manage.bat
Size

289B
MD5

3b001f8d88211bf2f64a1fbd7cfc22a4
SHA1

f27eec327bc4689848fcda18bf88402d649143c2
SHA256

303666e8136c8f5d1471f503dfa7ba32e5ac303f3b758a8af6a80cc7fdd61253
SHA512

2a94b1311fad0a408773ec30851f1a68d525b0db9a185865c1faf209eb1e6d8f8768ce35051e245b17e468714e645c2553898a833090e1ccb56db56e9bf2c4c3

Score

1^/10

Malware Config

Signatures

Delays execution with timeout.exe 1 IoCs

pid	Process
100	timeout.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4280 wrote to memory of 100	4280	cmd.exe	94
PID 4280 wrote to memory of 100	4280	cmd.exe	94

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Manage.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:4280
- C:\Windows\system32\timeout.exe
  timeout /t 5
  2⤵
  - Delays execution with timeout.exe
  PID:100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads