7f78b89885a2ffc441c22d31abac8a0d0fa7324e95ff03425c4ec58dc64613ac

Analysis

user interaction
yes
max time kernel
22s
max time network
21s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/07/2026, 03:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sigmalifev3.bat
Size 757B
Sample260703-ejvd2af15k
SHA256 7f78b89885a2ffc441c22d31abac8a0d0fa7324e95ff03425c4ec58dc64613ac
MD5 9a2c76755edaef9d93d6448e3f8d149e
SHA1 f90009e8f169bb162295cf99d2b62bdbc57c3cb3
SHA512 0628eb1c19a421721468767f89c538b72819ad8bbbff0264a9f1bd3078824db3e2129c12a25a391f11983fab4ab3c89d8111b34c36f8573eb6c4343754deb3e7
TLSH
T17F014C94F330E05164BA1E194DF06181FA25558F530BBDC8788F74780F013C4BA998B4
MD5 SHA1 SHA512 TLSH

Score

1^/10

defense_evasion

Malware Config

Signatures

Delays execution with timeout.exe 64 IoCs

defense_evasion

pid	Process
5712	timeout.exe
5440	timeout.exe
6644	timeout.exe
6708	timeout.exe
1180	timeout.exe
2788	timeout.exe
6008	timeout.exe
6184	timeout.exe
228	timeout.exe
992	timeout.exe
1800	timeout.exe
1668	timeout.exe
6716	timeout.exe
6700	timeout.exe
2152	timeout.exe
6620	timeout.exe
2576	timeout.exe
5560	timeout.exe
6788	timeout.exe
3000	timeout.exe
1108	timeout.exe
4476	timeout.exe
5568	timeout.exe
6652	timeout.exe
4524	timeout.exe
5084	timeout.exe
1680	timeout.exe
1044	timeout.exe
5256	timeout.exe
5904	timeout.exe
3292	timeout.exe
4472	timeout.exe
3308	timeout.exe
6040	timeout.exe
3148	timeout.exe
6952	timeout.exe
4496	timeout.exe
5492	timeout.exe
6232	timeout.exe
2916	timeout.exe
2968	timeout.exe
2936	timeout.exe
6892	timeout.exe
4916	timeout.exe
2568	timeout.exe
2532	timeout.exe
5552	timeout.exe
4704	timeout.exe
4992	timeout.exe
6024	timeout.exe
6076	timeout.exe
4944	timeout.exe
6984	timeout.exe
624	timeout.exe
4564	timeout.exe
4536	timeout.exe
5404	timeout.exe
5476	timeout.exe
6064	timeout.exe
6976	timeout.exe
1608	timeout.exe
1940	timeout.exe
5484	timeout.exe
5632	timeout.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3596 wrote to memory of 4816	3596	cmd.exe	88
PID 3596 wrote to memory of 624	3596	cmd.exe	89
PID 3596 wrote to memory of 3392	3596	cmd.exe	90
PID 3596 wrote to memory of 2968	3596	cmd.exe	91
PID 3596 wrote to memory of 3292	3596	cmd.exe	92
PID 3596 wrote to memory of 2568	3596	cmd.exe	93
PID 3596 wrote to memory of 2532	3596	cmd.exe	94
PID 3596 wrote to memory of 1608	3596	cmd.exe	95
PID 3596 wrote to memory of 3080	3596	cmd.exe	96
PID 3596 wrote to memory of 60	3596	cmd.exe	97
PID 3596 wrote to memory of 3100	3596	cmd.exe	100
PID 3596 wrote to memory of 3168	3596	cmd.exe	102
PID 3596 wrote to memory of 3648	3596	cmd.exe	103
PID 3596 wrote to memory of 2168	3596	cmd.exe	104
PID 3596 wrote to memory of 3884	3596	cmd.exe	105
PID 3596 wrote to memory of 2344	3596	cmd.exe	106
PID 3596 wrote to memory of 4376	3596	cmd.exe	107
PID 3596 wrote to memory of 4316	3596	cmd.exe	108
PID 3596 wrote to memory of 4800	3596	cmd.exe	110
PID 3596 wrote to memory of 2212	3596	cmd.exe	118
PID 3596 wrote to memory of 3600	3596	cmd.exe	119
PID 3596 wrote to memory of 1768	3596	cmd.exe	122
PID 3100 wrote to memory of 992	3100	cmd.exe	124
PID 3080 wrote to memory of 1680	3080	cmd.exe	125
PID 60 wrote to memory of 4472	60	cmd.exe	126
PID 3596 wrote to memory of 4976	3596	cmd.exe	127
PID 3596 wrote to memory of 2520	3596	cmd.exe	129
PID 3596 wrote to memory of 4696	3596	cmd.exe	131
PID 3596 wrote to memory of 1564	3596	cmd.exe	132
PID 3596 wrote to memory of 4820	3596	cmd.exe	133
PID 3596 wrote to memory of 4088	3596	cmd.exe	134
PID 4800 wrote to memory of 1180	4800	cmd.exe	139
PID 1768 wrote to memory of 3308	1768	cmd.exe	140
PID 3648 wrote to memory of 1940	3648	cmd.exe	141
PID 3884 wrote to memory of 4496	3884	cmd.exe	142
PID 2344 wrote to memory of 2788	2344	cmd.exe	143
PID 4376 wrote to memory of 1800	4376	cmd.exe	144
PID 2168 wrote to memory of 4564	2168	cmd.exe	145
PID 3168 wrote to memory of 4536	3168	cmd.exe	146
PID 3596 wrote to memory of 1640	3596	cmd.exe	147
PID 4316 wrote to memory of 4704	4316	cmd.exe	149
PID 2212 wrote to memory of 1668	2212	cmd.exe	150
PID 3600 wrote to memory of 2936	3600	cmd.exe	151
PID 4088 wrote to memory of 4476	4088	cmd.exe	152
PID 3596 wrote to memory of 1828	3596	cmd.exe	153
PID 3596 wrote to memory of 4804	3596	cmd.exe	155
PID 3596 wrote to memory of 4256	3596	cmd.exe	157
PID 1640 wrote to memory of 4992	1640	cmd.exe	158
PID 4976 wrote to memory of 1044	4976	cmd.exe	159
PID 3596 wrote to memory of 3692	3596	cmd.exe	161
PID 3596 wrote to memory of 2804	3596	cmd.exe	162
PID 3596 wrote to memory of 4420	3596	cmd.exe	163
PID 3596 wrote to memory of 1148	3596	cmd.exe	164
PID 3596 wrote to memory of 980	3596	cmd.exe	165
PID 3596 wrote to memory of 3572	3596	cmd.exe	166
PID 1564 wrote to memory of 4916	1564	cmd.exe	173
PID 4820 wrote to memory of 1108	4820	cmd.exe	174
PID 4696 wrote to memory of 2576	4696	cmd.exe	175
PID 2520 wrote to memory of 540	2520	cmd.exe	176
PID 3596 wrote to memory of 2220	3596	cmd.exe	177
PID 3596 wrote to memory of 3804	3596	cmd.exe	179
PID 3596 wrote to memory of 3452	3596	cmd.exe	181
PID 3596 wrote to memory of 2904	3596	cmd.exe	183
PID 3596 wrote to memory of 4708	3596	cmd.exe	184

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\sigmalifev3.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:3596
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:4816
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:624
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3392
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2968
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:3292
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2568
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2532
- C:\Windows\system32\timeout.exe
  timeout /t 2
  2⤵
  - Delays execution with timeout.exe
  PID:1608
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3080
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:1680
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:60
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:4472
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3100
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:992
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3168
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:4536
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3648
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:1940
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2168
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:4564
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3884
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:4496
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2344
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:2788
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4376
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:1800
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4316
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:4704
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4800
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:1180
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2212
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:1668
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3600
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:2936
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1768
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:3308
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4976
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:1044
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2520
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    PID:540
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4696
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:2576
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1564
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:4916
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4820
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:1108
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4088
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:4476
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1640
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:4992
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:1828
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:5256
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:4804
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:5552
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:4256
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:5484
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:3692
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:5492
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:2804
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:5568
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:4420
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    PID:5248
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:1148
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:5404
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:980
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:5476
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:3572
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:5560
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:2220
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    PID:5616
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:3804
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:5632
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:3452
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:5712
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:2904
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:6024
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:4708
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:6064
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:1996
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:6008
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:1020
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:4944
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:3832
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    PID:6016
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:1480
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:6040
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:2400
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    PID:6032
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:5080
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:6076
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:5372
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:5440
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:5396
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:5904
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:5648
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    PID:6604
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:5664
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:6652
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:5672
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    PID:6724
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:5680
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:6184
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:5688
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    PID:6488
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:5696
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:6644
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:5704
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:6700
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:5828
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:6708
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:5888
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:6716
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:4424
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:6232
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6200
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    PID:1124
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6224
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:2152
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6252
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:6952
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6260
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:6788
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6268
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:6620
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6276
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    PID:1528
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6284
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:6976
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6344
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:6892
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6352
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:228
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6360
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    PID:5092
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6756
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:6984
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6800
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:3148
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6836
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    PID:4244
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6844
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:2916
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6852
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    PID:1840
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6860
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:4524
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6868
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    PID:3948
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6876
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    PID:1604
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6884
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:5084
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6900
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    PID:3552
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6908
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    - Delays execution with timeout.exe
    PID:3000
- C:\Windows\system32\cmd.exe
  cmd /c "color 4f & title Error & echo. & echo ERROR: Sex Hacker: Get Hacked Sex Nigger & echo. & timeout /t 5 >nul & exit"
  2⤵
  PID:6916
- - C:\Windows\system32\timeout.exe
    timeout /t 5
    3⤵
    PID:548

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads