Analysis

  • max time kernel
    97s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/11/2024, 15:39

General

  • Target

    обходик — копия/service_goodbye_discord.bat

  • Size

    1KB

  • MD5

    92fb081844f5e595fc0d8ad83428180b

  • SHA1

    e939783f9c56d65727686d4f42e7ddb7fb0622af

  • SHA256

    2a8e5d588288d83046df7df701400793921ba960ac60cec297fefe0c31b50268

  • SHA512

    82319b73222354e0cd318350179bd7d46554fbbf0a985c9987af5a57f4783facb0f5b792ce561a7bc23a13345f638ed03499920b0b17b0eab8c6cc3fd2c81e72

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\обходик — копия\service_goodbye_discord.bat"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2848
    • C:\Windows\system32\chcp.com
      chcp 65001
      2⤵
        PID:4400

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads