Overview

overview

10

Static

static

10

EXMPremium...ty.exe

windows7-x64

7

EXMPremium...ty.exe

windows10-2004-x64

8

EXMPremium...ty.exe

windows7-x64

7

EXMPremium...ty.exe

windows10-2004-x64

8

System.Management.dll

windows7-x64

1

System.Management.dll

windows10-2004-x64

1

batchcolle...ver.py

windows7-x64

3

batchcolle...ver.py

windows10-2004-x64

3

batchcolle...a3.ps1

windows7-x64

3

batchcolle...a3.ps1

windows10-2004-x64

3

batchcolle...a5.ps1

windows7-x64

3

batchcolle...a5.ps1

windows10-2004-x64

3

batchcolle...d8.ps1

windows7-x64

3

batchcolle...d8.ps1

windows10-2004-x64

3

batchcolle...c3.ps1

windows7-x64

3

batchcolle...c3.ps1

windows10-2004-x64

3

mongocrypt.dll

windows7-x64

1

mongocrypt.dll

windows10-2004-x64

1

setup.bat

windows7-x64

1

setup.bat

windows10-2004-x64

1

start.bat

windows7-x64

1

start.bat

windows10-2004-x64

1

Analysis

  • max time kernel
    136s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-10-2024 07:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    start.bat

  • Size

    34B

  • MD5

    69ddf56665154f3276b27c5aa379a97a

  • SHA1

    d88a4be9caf7eb353bab8c8eaf72c984e2043367

  • SHA256

    2528949e5227db54fd02116e1fd9b3514a13452c9bdbdb3368d03a4d48f956d5

  • SHA512

    7e417370ee1fe1b8c86c3b36d419d7723e76803b69c91d58136ecaeaa51395fc55bca1fb96fc5dba437e55881804c1b45536eab162e3f3c01e35839542aa5579

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\start.bat"
    1⤵
      PID:5012

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads