79e1377ac17e6aece067d4cf6a202d8baf43a9906cea353de7188c43b20500c8

Analysis

max time kernel
149s
max time network
95s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 15:01

Target
Blank-Grabber-main/Blank Grabber/Builder.bat
Size 1KB
Sample260416-sd17aaez5t
SHA256 79e1377ac17e6aece067d4cf6a202d8baf43a9906cea353de7188c43b20500c8
MD5 69f3538d09da509b93329b22fd59a956
SHA1 d74ccc96102895e111712beedabcdc725fb23360
SHA512 a5e2fdeb2d185acda43e6a0d964966fc5246d2fe598d094e0b59bd757c42170d3e4125cf7da736080a95141b453d12a53af295eb53bd64e431285e8213da9b07
TLSH
T13D118E252015B87E7720D70781D792A2B6FA80D353726599B0FB42DF0F5655478BB602
MD5 SHA1 SHA512 TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3352 wrote to memory of 3880	3352	cmd.exe	81

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Blank-Grabber-main\Blank Grabber\Builder.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:3352
- C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.42251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe
  python --version
  2⤵
  PID:3880