5c09aa9d3b081d0030a376b96e23e87563c624f61cc767be09c98705abdf0cc5

Analysis

max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/05/2026, 01:00

Target
DiscordUsernameChecker-main/run.bat
Size 203B
Sample260528-bcxn2aev2t
SHA256 5c09aa9d3b081d0030a376b96e23e87563c624f61cc767be09c98705abdf0cc5
MD5 16a31f857deb63ba3dcf9beb7dfa0644
SHA1 ede7234a15bea6eda54111cb00bbdb7c4d3b3ba9
SHA512 ca8a4eb166b9ee079cf41261c09d0039fa8e43c11c4a9e163ce61b08ede172c698b4cae21186cdb221da4410190927c1cefa7c9bc66ff3c9b0dbd463e40f89a9
TLSH
T1BBD02229109393EA3A283BB082A117423383E842262A2C0371CFC0B48A6E880B26755D
MD5 SHA1 SHA512 TLSH

Score

1^/10

defense_evasion

Delays execution with timeout.exe 1 IoCs

defense_evasion

pid	Process
848	timeout.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 1860 wrote to memory of 848	1860	cmd.exe	82

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\DiscordUsernameChecker-main\run.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:1860
- C:\Windows\system32\timeout.exe
  timeout /t 2
  2⤵
  - Delays execution with timeout.exe
  PID:848