079dbb2df205f55d4f22afdc34249a72a7777417608ebf391475760c098d56e0

Analysis

max time kernel
148s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/07/2026, 04:41

Target
Bat Using Html Redy To Fuck.bat
Size 1KB
Sample260716-fbjs1adt2q
SHA256 079dbb2df205f55d4f22afdc34249a72a7777417608ebf391475760c098d56e0
MD5 3a62e9874315a89c679bab1db6d4e044
SHA1 87b6cfd51895282e3aba638e07955ec60fde5d10
SHA512 e978e6fd351c36c6373c49fb5aa52d20404e95d4a8bc5525c80e076cea027c077545be02e115dc63559c515e1430ee73446a53e6faf831ead9069c11164cdc00
TLSH
T16F2184822D2EDD9C92D0A3B424BAF10EE46759E51640CF278944980BBED63EADDC72C5
MD5 SHA1 SHA512 TLSH

Score

1^/10

defense_evasion

Delays execution with timeout.exe 1 IoCs

defense_evasion

pid	Process
4084	timeout.exe

Kills process with taskkill 1 IoCs

defense_evasion

pid	Process
4136	taskkill.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4136	taskkill.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 3744 wrote to memory of 4084	3744	cmd.exe	89
PID 3744 wrote to memory of 4136	3744	cmd.exe	90

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Bat Using Html Redy To Fuck.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:3744
- C:\Windows\system32\timeout.exe
  timeout /t 2 /nobreak
  2⤵
  - Delays execution with timeout.exe
  PID:4084
- C:\Windows\system32\taskkill.exe
  taskkill /f /im cmd.exe"
  2⤵
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:4136