a6ac289c377f3811c4520d5be32ac7783d55b3d552adb7c096b7a7ecff96d86f

Analysis

max time kernel
148s
max time network
122s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/07/2026, 21:16

Target
DDoS-Tools.bat
Size 8KB
Sample260707-z4kesaex21
SHA256 a6ac289c377f3811c4520d5be32ac7783d55b3d552adb7c096b7a7ecff96d86f
MD5 9fe775e3b7df67a433ff67bbe5f3f663
SHA1 a3cfb49c348ac8313947261afdafb3d93f279261
SHA512 5977850c240dbf175d0877bdeba922d6351051c9cab7f50b6a1a54d29d8eef3b492629fc16eb32126100848ec14c598dca01006ea076e3c96a2e25b5ab7a0b76
SSDEEP 96:9roVNoZdOi2hIKMzyUuVmTgTJJSEVmTgT9QiSaLoBXDhaFCGFRHPoaDcevNAJ6Fm:BoVNoOVUWUGdQiSaLOzhKCOHPnDcTD
TLSH
T15F0243267D43E0E1EDA5E2F24972900BE20260C787D80997BA6E50B1970A7CB777C15E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2776 wrote to memory of 3752	2776	cmd.exe	89

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\DDoS-Tools.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2776
- C:\Windows\system32\mode.com
  mode 110,40
  2⤵
  PID:3752