3264d09d3a398417226b7d346c2fc4757ffa445373763e2d7c2f18ef6edb2354 | Triage

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
18-10-2024 17:21

Sharing

Report Analysis Logs

General

Target

Manage.bat
Size

289B
MD5

3b001f8d88211bf2f64a1fbd7cfc22a4
SHA1

f27eec327bc4689848fcda18bf88402d649143c2
SHA256

303666e8136c8f5d1471f503dfa7ba32e5ac303f3b758a8af6a80cc7fdd61253
SHA512

2a94b1311fad0a408773ec30851f1a68d525b0db9a185865c1faf209eb1e6d8f8768ce35051e245b17e468714e645c2553898a833090e1ccb56db56e9bf2c4c3

Score

1^/10

Malware Config

Signatures

Delays execution with timeout.exe 1 IoCs
evasion

Processes:

timeout.exe

pid process

100 timeout.exe
Suspicious use of WriteProcessMemory 2 IoCs

Processes:

cmd.exe

description pid process target process

PID 4280 wrote to memory of 100 4280 cmd.exe timeout.exe
PID 4280 wrote to memory of 100 4280 cmd.exe timeout.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Manage.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:4280

C:\Windows\system32\timeout.exe
timeout /t 5
2⤵
- Delays execution with timeout.exe
PID:100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads