Analysis
- max time kernel
148s - max time network
124s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
- submitted
22/06/2026, 14:36
General
- Target LaunchApp.bat
- Size 23B
- Sample260622-ry17cads5m
- SHA256 a3e6236fa517f863ea551e17fcedcfc22df23e044dcd4863e6ddf3ef00966596
Malware Config
Signatures
- Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\LaunchApp.bat"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\init.exeinit.exe icon.txt2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5992-43-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-47-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-54-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-70-0x000001C98FFF0000-0x000001C98FFF1000-memory.dmp
memory/5992-63-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-62-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-61-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-60-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-59-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-78-0x000001C9917E0000-0x000001C9917E1000-memory.dmp
memory/5992-58-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-79-0x000001C9917E0000-0x000001C9917E1000-memory.dmp
memory/5992-77-0x000001C9917A0000-0x000001C9917D2000-memory.dmp
memory/5992-76-0x000001C98FFF0000-0x000001C98FFF1000-memory.dmp
memory/5992-57-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-56-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-55-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-53-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-52-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-51-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-50-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-49-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-48-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-46-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-45-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-44-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-42-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-41-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-39-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-38-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-36-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-34-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-32-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-31-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-30-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-29-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-27-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-25-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-26-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-23-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-20-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-19-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-18-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-17-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-16-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-15-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-14-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-13-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-12-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-11-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-10-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-8-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-7-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-6-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-5-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-4-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-3-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-40-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-37-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-35-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-33-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-28-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-24-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-22-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-21-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-9-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-2-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-1-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-0-0x00007FF7830F0000-0x00007FF783100000-memory.dmp
memory/5992-82-0x000001C98FFF0000-0x000001C98FFF1000-memory.dmp
memory/5992-83-0x000001C98FFF0000-0x000001C98FFF1000-memory.dmp
memory/5992-84-0x000001C9917A0000-0x000001C9917D2000-memory.dmp
memory/5992-85-0x000001C9917E0000-0x000001C9917E1000-memory.dmp