Analysis
- max time kernel
149s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
16/04/2026, 00:17
General
- Target Launch.bat
- Size 25B
- Sample260416-ak2saaez7w
- SHA256 b54ea465f77f1eb726d3244aa52d13c103ad9c4fc5a15061b7067347896b433c
Malware Config
Signatures
- Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Launch.bat"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\unc.exeunc.exe license.txt2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1536-38-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-45-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-50-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-49-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-48-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-47-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-52-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-46-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-44-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-43-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-42-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-41-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-40-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-53-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-63-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-69-0x0000016A38CE0000-0x0000016A38CE1000-memory.dmp
memory/1536-68-0x0000016A38CE0000-0x0000016A38CE1000-memory.dmp
memory/1536-61-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-62-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-60-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-59-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-57-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-58-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-56-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-55-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-54-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-39-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-36-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-35-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-34-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-33-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-32-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-31-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-30-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-29-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-28-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-27-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-26-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-25-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-23-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-22-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-21-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-20-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-19-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-18-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-16-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-15-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-14-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-13-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-11-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-10-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-9-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-8-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-7-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-6-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-5-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-4-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-2-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-0-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-51-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-37-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-24-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-17-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-12-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-3-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-1-0x00007FF7321F0000-0x00007FF732200000-memory.dmp
memory/1536-74-0x0000016A3A4E0000-0x0000016A3A4E1000-memory.dmp
memory/1536-72-0x0000016A3A4E0000-0x0000016A3A4E1000-memory.dmp
memory/1536-86-0x0000016A38CE0000-0x0000016A38CE1000-memory.dmp
memory/1536-87-0x0000016A38D20000-0x0000016A38D21000-memory.dmp
memory/1536-88-0x0000016A3A4E0000-0x0000016A3A4E1000-memory.dmp