Analysis
- max time kernel
148s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
- submitted
22/06/2026, 14:37
General
- Target App.bat
- Size 29B
- Sample260622-ry481ads9x
- SHA256 a96ffc9f649333f9e84b7a7e1101cf85f7a5f143253db1d7853e6e48d46b3c72
Malware Config
Signatures
- Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\App.bat"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\resolver.exeresolver.exe icon16.txt2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1104-50-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-47-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-48-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-52-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-51-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-46-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-45-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-44-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-43-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-56-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-58-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-61-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-60-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-59-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-57-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-72-0x00000257875D0000-0x00000257875D1000-memory.dmp
memory/1104-71-0x00000257875D0000-0x00000257875D1000-memory.dmp
memory/1104-55-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-54-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-63-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-62-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-53-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-42-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-40-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-30-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-38-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-37-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-75-0x00000257875E0000-0x00000257875E1000-memory.dmp
memory/1104-36-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-35-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-34-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-33-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-32-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-31-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-29-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-28-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-26-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-25-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-24-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-23-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-22-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-21-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-20-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-19-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-17-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-16-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-15-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-14-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-13-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-12-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-11-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-10-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-9-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-8-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-6-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-3-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-1-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-2-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-0-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-49-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-41-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-39-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-27-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-18-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-7-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-5-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-4-0x00007FF6E5650000-0x00007FF6E5660000-memory.dmp
memory/1104-82-0x00000257875D0000-0x00000257875D1000-memory.dmp
memory/1104-83-0x00000257875E0000-0x00000257875E1000-memory.dmp