Overview
overview
3Static
static
3cmd(Copy 10).bat
windows10-ltsc 2021-x64
1cmd(Copy 11).bat
windows10-ltsc 2021-x64
1cmd(Copy 12).bat
windows10-ltsc 2021-x64
1cmd(Copy 13).bat
windows10-ltsc 2021-x64
1cmd(Copy 14).bat
windows10-ltsc 2021-x64
1cmd(Copy 15).bat
windows10-ltsc 2021-x64
1cmd(Copy 16).bat
windows10-ltsc 2021-x64
1cmd(Copy 17).bat
windows10-ltsc 2021-x64
1cmd(Copy 18).bat
windows10-ltsc 2021-x64
1cmd(Copy 19).bat
windows10-ltsc 2021-x64
1cmd(Copy 2).bat
windows10-ltsc 2021-x64
1cmd(Copy 20).bat
windows10-ltsc 2021-x64
1cmd(Copy 21).bat
windows10-ltsc 2021-x64
1cmd(Copy 22).bat
windows10-ltsc 2021-x64
1cmd(Copy 23).bat
windows10-ltsc 2021-x64
1cmd(Copy 24).bat
windows10-ltsc 2021-x64
1cmd(Copy 25).bat
windows10-ltsc 2021-x64
1cmd(Copy 26).bat
windows10-ltsc 2021-x64
1cmd(Copy 27).bat
windows10-ltsc 2021-x64
1cmd(Copy 28).bat
windows10-ltsc 2021-x64
1cmd(Copy 29).bat
windows10-ltsc 2021-x64
1cmd(Copy 3).bat
windows10-ltsc 2021-x64
1cmd(Copy 30).bat
windows10-ltsc 2021-x64
1cmd(Copy 31).bat
windows10-ltsc 2021-x64
1cmd(Copy 32).bat
windows10-ltsc 2021-x64
1cmd(Copy 4).bat
windows10-ltsc 2021-x64
1cmd(Copy 5).bat
windows10-ltsc 2021-x64
1cmd(Copy 6).bat
windows10-ltsc 2021-x64
1cmd(Copy 7).bat
windows10-ltsc 2021-x64
1cmd(Copy 8).bat
windows10-ltsc 2021-x64
1cmd(Copy 9).bat
windows10-ltsc 2021-x64
1cmd(Copy).bat
windows10-ltsc 2021-x64
1Analysis
-
max time kernel
1790s -
max time network
1797s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241023-en -
resource tags
arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system -
submitted
17/11/2024, 13:45
Static task
static1
Behavioral task
behavioral1
Sample
cmd(Copy 10).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral2
Sample
cmd(Copy 11).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral3
Sample
cmd(Copy 12).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral4
Sample
cmd(Copy 13).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral5
Sample
cmd(Copy 14).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral6
Sample
cmd(Copy 15).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral7
Sample
cmd(Copy 16).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral8
Sample
cmd(Copy 17).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral9
Sample
cmd(Copy 18).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral10
Sample
cmd(Copy 19).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral11
Sample
cmd(Copy 2).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral12
Sample
cmd(Copy 20).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral13
Sample
cmd(Copy 21).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral14
Sample
cmd(Copy 22).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral15
Sample
cmd(Copy 23).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral16
Sample
cmd(Copy 24).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral17
Sample
cmd(Copy 25).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral18
Sample
cmd(Copy 26).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral19
Sample
cmd(Copy 27).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral20
Sample
cmd(Copy 28).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral21
Sample
cmd(Copy 29).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral22
Sample
cmd(Copy 3).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral23
Sample
cmd(Copy 30).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral24
Sample
cmd(Copy 31).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral25
Sample
cmd(Copy 32).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral26
Sample
cmd(Copy 4).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral27
Sample
cmd(Copy 5).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral28
Sample
cmd(Copy 6).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral29
Sample
cmd(Copy 7).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral30
Sample
cmd(Copy 8).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral31
Sample
cmd(Copy 9).bat
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral32
Sample
cmd(Copy).bat
Resource
win10ltsc2021-20241023-en
General
-
Target
cmd(Copy 19).bat
-
Size
190B
-
MD5
ab7e7b16804ed31b78b5da720d8950f2
-
SHA1
a9abc75f8bd2ced024ca91bb4625d643a2931d06
-
SHA256
21076876e61aabca6310d346d59a2cd68074186fb02c208eb37a934cc73f7289
-
SHA512
f2fe850e30a1750ac6885a6c356e916b507f4a650803f213f2ff9ef6d51c17e75a460d81206d0fd570a30757eb7f48c25364c71e2e041ce02908dff00c11e09f
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 1176 wrote to memory of 1080 1176 cmd.exe 83 PID 1176 wrote to memory of 1080 1176 cmd.exe 83
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\cmd(Copy 19).bat"1⤵
- Suspicious use of WriteProcessMemory
PID:1176 -
C:\Users\Admin\AppData\Local\Temp\sugarmaker-amd.exe"C:\Users\Admin\AppData\Local\Temp\"sugarmaker-amd.exe -a YespowerTIDE -o stratum+tcp://stratum-eu.rplant.xyz:7059 -u TD368ah8Kuzn2quR7g6r8sUYbsVvKzwpyc.SGM -t 42⤵PID:1080
-