9592d6aad52b861cc24603466501b5159a1c2797a327afd79b86966b6c836236

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/06/2026, 12:45

Target
Ara System Optimizer.bat
Size 4KB
Sample260626-pzdfkact4m
SHA256 9592d6aad52b861cc24603466501b5159a1c2797a327afd79b86966b6c836236
MD5 157a1523a96600978c12a05a0c22ee3a
SHA1 a2f90b9f791d1aba3c02cbe1de7ab5fadafbf9aa
SHA512 73efef8d591e9f39db309c77955cef4d187dbe96de8ec94f56871a856cafd9a1a3a053eade858529702f0b202414826ae785e845ab270cebe6a7002dd3f2fa4f
SSDEEP 96:FOdVjwFSXzaffNRH5Ehyv0YlzU795AOMmKN5Y0zEVgbW:Fk0FSXefffZEhyv0YtUE3m
TLSH
T13CA1313B3C1502319C52D267FF3AD4A7FA1261C388449A69B82F1139734B3D4A5BE1AE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 5960 wrote to memory of 1848	5960	cmd.exe	91
PID 5960 wrote to memory of 2992	5960	cmd.exe	92

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Ara System Optimizer.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:5960
- C:\Windows\system32\chcp.com
  chcp 65001
  2⤵
  PID:1848
- C:\Windows\system32\mode.com
  mode 103,35
  2⤵
  PID:2992