9b99a179a2e03b817a826413781ac4b8668cd1ee5d1cfdf3c292192cf7aae1f1

Analysis

max time kernel
898s
max time network
475s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
23/05/2026, 00:07

Target
VoidWipe v1.3.bat
Size 1KB
Sample260523-aeeessbv2v
SHA256 9b99a179a2e03b817a826413781ac4b8668cd1ee5d1cfdf3c292192cf7aae1f1
MD5 0402e10ed52d00cb54b9254b76f15ae0
SHA1 6d0cadcac570507428f162e7a85580abe1f0512a
SHA512 f60a3af3bb0624d1a1e5985787b0919ee3caf1f1ac7ca4a5b339fd62d91e034187cd236b09762fce25c5688708fce8dbb9882f7680ed7961f6ec5eeb95015a1f
TLSH
T15621972B714195205E343D495D328EC57A2D000BD611688038CF20F9AF3F8C2FEB8B55
MD5 SHA1 SHA512 TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 5444 wrote to memory of 5512	5444	cmd.exe	81

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\VoidWipe v1.3.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:5444
- C:\Windows\system32\choice.exe
  choice /C YN /N /M "BURN THE WORLD? [Y/N]" /T 10 /D N
  2⤵
  PID:5512