148a1c1af4e101601ade35b37735f897b9ee475bb43ac5581d9b77893c5026ae

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20250619-en
resource tags

arch:x64arch:x86image:win10v2004-20250619-enlocale:en-usos:windows10-2004-x64system
submitted
08/05/2026, 00:23

Target
BDT-2-XML Version 26.01.95/bdt.bat
Size 50B
Sample260508-apq7caft9j
SHA256 148a1c1af4e101601ade35b37735f897b9ee475bb43ac5581d9b77893c5026ae
MD5 f94e57f78d5d4766fb7f79c27b6efade
SHA1 dc14924ff90c4fab5284a4125daffef9864ad8f0
SHA512 843b330a8e3fef7773edcd60699160e96f0ee3bd47280fe998b7939adbd3c59f473178bdac3dfd7bb371b4436b6c16ce5ecd37e1d0488b40fea671f49a56c41a
TLSH
T1A29002115855518457F36987DB21A5D54609720895098036A510D115AD010502B14911
MD5 SHA1 SHA512 TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4048 wrote to memory of 2820	4048	cmd.exe	85

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\BDT-2-XML Version 26.01.95\bdt.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:4048
- C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
  java -Xmx13G -jar bdtToT2XML-26.01.95.jar
  2⤵
  PID:2820

memory/2820-2-0x000001E480000000-0x000001E480270000-memory.dmp

Download

memory/2820-12-0x000001E4EFB70000-0x000001E4EFB71000-memory.dmp

Download

memory/2820-13-0x000001E480000000-0x000001E480270000-memory.dmp

Download