Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
04/06/2026, 06:52
General
- Target Application.cmd
- Size 25B
- Sample260604-hm5wqaay4v
- SHA256 4022e59005850fcdaccbbb28e3bcfc78e25d0db9c70a6ca80b6693f8697fc829
Malware Config
Signatures
- Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Application.cmd"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\binc.exebinc.exe util.txt2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1592-23-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-50-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-63-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-82-0x00000263089A0000-0x00000263089A1000-memory.dmp
memory/1592-81-0x00000263089A0000-0x00000263089A1000-memory.dmp
memory/1592-80-0x00000263089A0000-0x00000263089A1000-memory.dmp
memory/1592-79-0x00000263089A0000-0x00000263089A1000-memory.dmp
memory/1592-78-0x00000263089A0000-0x00000263089A1000-memory.dmp
memory/1592-62-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-61-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-60-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-59-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-58-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-57-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-56-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-55-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-54-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-53-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-52-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-51-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-49-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-48-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-47-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-46-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-45-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-44-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-43-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-42-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-41-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-40-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-39-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-38-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-37-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-36-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-35-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-34-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-33-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-32-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-31-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-30-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-29-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-28-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-27-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-26-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-25-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-24-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-21-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-19-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-18-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-17-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-16-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-15-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-13-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-11-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-10-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-9-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-8-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-7-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-6-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-2-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-1-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-22-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-20-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-14-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-12-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-5-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-4-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-3-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-0-0x00007FFC3C4F0000-0x00007FFC3C500000-memory.dmp
memory/1592-122-0x00000263089A0000-0x00000263089A1000-memory.dmp