9b99a179a2e03b817a826413781ac4b8668cd1ee5d1cfdf3c292192cf7aae1f1

Analysis

max time kernel
899s
max time network
474s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/05/2026, 00:07

Target
VoidWipe v1.3.bat
Size 1KB
Sample260523-aeeessbv2v
SHA256 9b99a179a2e03b817a826413781ac4b8668cd1ee5d1cfdf3c292192cf7aae1f1
MD5 0402e10ed52d00cb54b9254b76f15ae0
SHA1 6d0cadcac570507428f162e7a85580abe1f0512a
SHA512 f60a3af3bb0624d1a1e5985787b0919ee3caf1f1ac7ca4a5b339fd62d91e034187cd236b09762fce25c5688708fce8dbb9882f7680ed7961f6ec5eeb95015a1f
TLSH
T15621972B714195205E343D495D328EC57A2D000BD611688038CF20F9AF3F8C2FEB8B55
MD5 SHA1 SHA512 TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4776 wrote to memory of 4640	4776	cmd.exe	88

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\VoidWipe v1.3.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:4776
- C:\Windows\system32\choice.exe
  choice /C YN /N /M "BURN THE WORLD? [Y/N]" /T 10 /D N
  2⤵
  PID:4640