8d412ad0edeeac91f56841f7d71076846e3b9d7acb7bc7214ccfb910661e3f82

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/06/2026, 00:19

Target
Batch CIA 3DS Decryptor.bat
Size 2KB
Sample260628-amltvaev5m
SHA256 8d412ad0edeeac91f56841f7d71076846e3b9d7acb7bc7214ccfb910661e3f82
MD5 5d86ad3b724a51f72610afdb98c34929
SHA1 9e37208a037b7112773a865742b7cdd7124c4cd1
SHA512 851b1da7142fd649cc51c390a1b0420beedf198d050a9f8f9bdcb4075ae39c98504b7f543a26fae48bdd6159f5ab722cd492c52636b5d3ad695311b5513797b8
TLSH
T10951DCEF33CB4CD4836505E2593489062E5DC6C6CE1AD788B4C483BBB9A137D8679ADC
MD5 SHA1 SHA512 TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3564 wrote to memory of 2704	3564	cmd.exe	87

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Batch CIA 3DS Decryptor.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:3564
- C:\Windows\system32\mode.com
  mode con cols=52 lines=26
  2⤵
  PID:2704