2db5ae99049e1df8873df954f42aadc7e4a89c0810bbeec18392a4d02deafc0e

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/07/2026, 00:16

Target
ControleDeAcesso-v1.0.0\install_dependencies.bat
Size 447B
Sample260709-aksvdaby5v
SHA256 2db5ae99049e1df8873df954f42aadc7e4a89c0810bbeec18392a4d02deafc0e
MD5 cb5083053006cbbe923bdc4f6a4d099a
SHA1 51ec2f338189987c3bfe6596260eb33e1400d90c
SHA512 508fa4b6944490b02bc097c56fc852f3bf5faa405184278f0b7bf0901161016f336088d7bfb1af293875ad62e7e2d25b5f35472f88817235c7e2137d0678dbf8
TLSH
T1D8F0A30B39A49139F5E8404F871FD0526C03B0A70181CDCE74FBD09C1E4A820A7E5322
MD5 SHA1 SHA512 TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4564 wrote to memory of 1780	4564	cmd.exe	87

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\ControleDeAcesso-v1.0.0\install_dependencies.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:4564
- C:\Windows\system32\where.exe
  where python
  2⤵
  PID:1780