324f8cf90c9f503b8a10b1bb9ae29b0b6a311c250d98fd92b72369a70139f43c | Triage™

Analysis

user interaction
yes
max time kernel
149s
max time network
93s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/05/2026, 05:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
run.bat
Size 15B
Sample260522-ge76faey3n
SHA256 324f8cf90c9f503b8a10b1bb9ae29b0b6a311c250d98fd92b72369a70139f43c
MD5 7448838a1f27e1ec65ae518ce950c82f
SHA1 516e1c9cadae11117d2ecf04b72f42674fc7bb01
SHA512 5ae89ccdd9a948b8af1dff830c30cdf7d3e71a363d37d1f8f0358ca38b51b30d8c840f3a1f2edfd74e9256d38794402faf18f669ce95f7b99d275c134057be76
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3296 wrote to memory of 4508	3296	cmd.exe	81

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\run.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:3296
- C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.42251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe
  python brute.py
  2⤵
  PID:4508

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads