1b398f3c7c23e843b6c41e36f0274512faec6612f567202835a30e8394c6ce17

Analysis

max time kernel
0s
max time network
1s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
05/11/2024, 01:59

Target

AJ's Tool Panel V2/AJ's TooI Panel V2.bat
Size

7KB
MD5

b714f5d0c3315f80931e93370bd4146b
SHA1

f1ff2d405282e323c9575d3f3d7620cb83331718
SHA256

ab32009a8e419b8a70ad87862f23f10ba007d2c0e8b63c99bc13c2fd62e94d93
SHA512

2801d6ea8ef8da31a3aa0ce026a3a9c4027d4710757f84d9b2886a1392072beef90713a81e72fbaf80de062d61cf43febc0561a9f24c0ac0a0f3dd407e7a1aca
SSDEEP

192:XQwBvh1W+HylewSkldNyytHVB6Mz9tHVB6MzftHVB6Mzp:gwBvh1W+HylQId7

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 740 wrote to memory of 2732	740	cmd.exe	85
PID 740 wrote to memory of 2732	740	cmd.exe	85

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\AJ's Tool Panel V2\AJ's TooI Panel V2.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:740
- C:\Windows\system32\chcp.com
  chcp 65001
  2⤵
  PID:2732