aa79ac94e2d1d633c9ac7953978506f1437239c8d55a33a2691e3184fb5ca5a1 | Triage

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
11-12-2024 00:31

Sharing

Report Analysis Logs

General

Target

empyrean-main/build.bat
Size

661B
MD5

02999ead0aaf6abffd2517a3a6f5f1ba
SHA1

fa21a96e98fa69c33c9a61bcaaeb7c32c2d0bd34
SHA256

9ffb159c02ea6f5f1214325f381c991244a092c95d63741a07e785af9063f144
SHA512

66eb88ce8de38eaf90f294a6a97c4dea8dbfaafb928a7f27360fa3d1b244dda73f542d8ad15e0591534e797c44c0f1a0f533bcf5291d3f80329bcc95c97b6d29

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2736 wrote to memory of 1680	2736	cmd.exe	29
PID 2736 wrote to memory of 1680	2736	cmd.exe	29
PID 2736 wrote to memory of 1680	2736	cmd.exe	29

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\empyrean-main\build.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2736
- C:\Windows\system32\mode.com
  mode con: cols=100 lines=30
  2⤵
  PID:1680

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads