Analysis

  • max time kernel
    93s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/11/2024, 15:39

General

  • Target

    обходик — копия/service_discord.bat

  • Size

    1KB

  • MD5

    5660fd4c3c7c0da34dd921866de7ef60

  • SHA1

    b6c6b1d1557e9f321a91fef15b28d9ab45fe4443

  • SHA256

    375db71a4235c9596781e44b0032f6181b018f41096afa4d782f83f52793a644

  • SHA512

    31cb8524cc02aef2812faa645222cad641ecea9668daa1e4052e5164e3377e718b429634266e692189b34a52704599b55d9225b4335505ad8c63cfca98c5c139

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\обходик — копия\service_discord.bat"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4552
    • C:\Windows\system32\chcp.com
      chcp 65001
      2⤵
        PID:3556

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads