c22b74bb5b950a631aab0b48d9480861b6bcd02de2be9cbc9294c760344b430b | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
23-11-2024 16:08

Sharing

Report Analysis Logs

General

Target

$_13_/bnn.bat
Size

146B
MD5

0b4d87168954eff0d213d2785fce723a
SHA1

79944843aba1c4ea95083026845552648a18f197
SHA256

b2d3e4c0e7d1c0a3d1308df4673e971246356c7b7e11885a2b9631ecac828b65
SHA512

9518c8af4c9870f058b57d97723581e979ebaa69478cd6b7ad9837cbdc84b75bc848019781aa9d20d498df6871833651f5c79e3d5da2e917a435cce71c8d0cc4

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2668 wrote to memory of 2776	2668	cmd.exe	31
PID 2668 wrote to memory of 2776	2668	cmd.exe	31
PID 2668 wrote to memory of 2776	2668	cmd.exe	31

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\$_13_\bnn.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2668
- C:\Windows\system32\reg.exe
  reg add "HKCU\SOFTWARE\Policies\Microsoft\Edge" /v "SmartScreenEnabled" /t reg_DWORD /d 0 /f
  2⤵
  PID:2776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads