0e0aa0d2989d6379df2fb26e67a46b947f1c69aea54e119205bee15ada6c25cc

Analysis

max time kernel
149s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/10/2026, 16:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
noobie.bat
Size 113B
Sample261022-vbterssvcw
SHA256 0e0aa0d2989d6379df2fb26e67a46b947f1c69aea54e119205bee15ada6c25cc
MD5 a1954da0ff1036ece8abc9b7797b5107
SHA1 8178f48131cd47b39ef8d0d57fb89c924a40c53b
SHA512 17b3699f7d49f85d4e43291eeeed3e6162cf790bd13dd524300ef77d9a0b8130b4540aee61217eeffcb83369e556c3434afd359b729e36691a0cb14262a84413
TLSH
T13AB0120F900B65C23072EE5A24B518D13133B13BEC459DC5724721534EC21C5B10E089
MD5 SHA1 SHA512 TLSH

Score

3^/10

defense_evasion execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2156	cmd.exe

Delays execution with timeout.exe 64 IoCs

defense_evasion

pid	Process
4876	timeout.exe
896	timeout.exe
2852	timeout.exe
2976	timeout.exe
5012	timeout.exe
5064	timeout.exe
3024	timeout.exe
1232	timeout.exe
3884	timeout.exe
1948	timeout.exe
2244	timeout.exe
5136	timeout.exe
436	timeout.exe
5872	timeout.exe
6012	timeout.exe
756	timeout.exe
956	timeout.exe
3748	timeout.exe
2996	timeout.exe
4612	timeout.exe
1392	timeout.exe
4752	timeout.exe
2648	timeout.exe
4212	timeout.exe
2308	timeout.exe
5504	timeout.exe
5380	timeout.exe
3412	timeout.exe
2756	timeout.exe
4572	timeout.exe
4652	timeout.exe
4496	timeout.exe
2744	timeout.exe
5936	timeout.exe
3424	timeout.exe
2288	timeout.exe
1644	timeout.exe
3356	timeout.exe
3516	timeout.exe
2416	timeout.exe
4120	timeout.exe
1984	timeout.exe
2116	timeout.exe
2160	timeout.exe
3216	timeout.exe
4372	timeout.exe
2576	timeout.exe
2324	timeout.exe
4516	timeout.exe
2164	timeout.exe
1876	timeout.exe
5724	timeout.exe
3028	timeout.exe
2484	timeout.exe
2608	timeout.exe
4892	timeout.exe
5384	timeout.exe
2596	timeout.exe
2624	timeout.exe
1336	timeout.exe
5540	timeout.exe
4820	timeout.exe
6012	timeout.exe
2416	timeout.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2156 wrote to memory of 1460	2156	cmd.exe	90
PID 2156 wrote to memory of 5840	2156	cmd.exe	91
PID 2156 wrote to memory of 4876	2156	cmd.exe	92
PID 2156 wrote to memory of 4120	2156	cmd.exe	93
PID 2156 wrote to memory of 5252	2156	cmd.exe	94
PID 2156 wrote to memory of 1984	2156	cmd.exe	95
PID 2156 wrote to memory of 2484	2156	cmd.exe	96
PID 2156 wrote to memory of 3328	2156	cmd.exe	97
PID 2156 wrote to memory of 4164	2156	cmd.exe	98
PID 2156 wrote to memory of 4516	2156	cmd.exe	99
PID 2156 wrote to memory of 3804	2156	cmd.exe	100
PID 2156 wrote to memory of 2116	2156	cmd.exe	101
PID 2156 wrote to memory of 2744	2156	cmd.exe	102
PID 2156 wrote to memory of 2268	2156	cmd.exe	103
PID 2156 wrote to memory of 3488	2156	cmd.exe	104
PID 2156 wrote to memory of 5440	2156	cmd.exe	105
PID 2156 wrote to memory of 1012	2156	cmd.exe	106
PID 2156 wrote to memory of 4316	2156	cmd.exe	107
PID 2156 wrote to memory of 4840	2156	cmd.exe	108
PID 2156 wrote to memory of 2308	2156	cmd.exe	109
PID 2156 wrote to memory of 3332	2156	cmd.exe	110
PID 2156 wrote to memory of 2164	2156	cmd.exe	111
PID 2156 wrote to memory of 1132	2156	cmd.exe	112
PID 2156 wrote to memory of 3516	2156	cmd.exe	113
PID 2156 wrote to memory of 2416	2156	cmd.exe	114
PID 2156 wrote to memory of 1336	2156	cmd.exe	115
PID 2156 wrote to memory of 3412	2156	cmd.exe	116
PID 2156 wrote to memory of 4544	2156	cmd.exe	117
PID 2156 wrote to memory of 6012	2156	cmd.exe	118
PID 2156 wrote to memory of 5064	2156	cmd.exe	119
PID 2156 wrote to memory of 1224	2156	cmd.exe	120
PID 2156 wrote to memory of 3884	2156	cmd.exe	122
PID 2156 wrote to memory of 2620	2156	cmd.exe	123
PID 2156 wrote to memory of 352	2156	cmd.exe	124
PID 2156 wrote to memory of 248	2156	cmd.exe	125
PID 2156 wrote to memory of 1948	2156	cmd.exe	126
PID 2156 wrote to memory of 4612	2156	cmd.exe	127
PID 2156 wrote to memory of 5496	2156	cmd.exe	128
PID 2156 wrote to memory of 5936	2156	cmd.exe	129
PID 2156 wrote to memory of 1392	2156	cmd.exe	130
PID 2156 wrote to memory of 4752	2156	cmd.exe	131
PID 2156 wrote to memory of 5540	2156	cmd.exe	132
PID 2156 wrote to memory of 2648	2156	cmd.exe	133
PID 2156 wrote to memory of 3076	2156	cmd.exe	134
PID 2156 wrote to memory of 2996	2156	cmd.exe	135
PID 2156 wrote to memory of 4572	2156	cmd.exe	136
PID 2156 wrote to memory of 672	2156	cmd.exe	137
PID 2156 wrote to memory of 896	2156	cmd.exe	138
PID 2156 wrote to memory of 5504	2156	cmd.exe	139
PID 2156 wrote to memory of 3944	2156	cmd.exe	140
PID 2156 wrote to memory of 2480	2156	cmd.exe	141
PID 2156 wrote to memory of 4820	2156	cmd.exe	142
PID 2156 wrote to memory of 2240	2156	cmd.exe	143
PID 2156 wrote to memory of 5060	2156	cmd.exe	144
PID 2156 wrote to memory of 5236	2156	cmd.exe	145
PID 2156 wrote to memory of 864	2156	cmd.exe	146
PID 2156 wrote to memory of 756	2156	cmd.exe	147
PID 2156 wrote to memory of 3816	2156	cmd.exe	148
PID 2156 wrote to memory of 956	2156	cmd.exe	149
PID 2156 wrote to memory of 3424	2156	cmd.exe	150
PID 2156 wrote to memory of 2980	2156	cmd.exe	151
PID 2156 wrote to memory of 5864	2156	cmd.exe	152
PID 2156 wrote to memory of 5488	2156	cmd.exe	153
PID 2156 wrote to memory of 5720	2156	cmd.exe	154

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\noobie.bat"
1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
PID:2156
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:1460
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5840
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:4876
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:4120
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5252
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:1984
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2484
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3328
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:4164
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:4516
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3804
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2116
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2744
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:2268
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3488
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5440
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:1012
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:4316
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:4840
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2308
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3332
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2164
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:1132
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3516
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2416
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:1336
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3412
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:4544
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:6012
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5064
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:1224
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:3884
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:2620
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:352
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:248
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:1948
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:4612
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5496
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:5936
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:1392
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:4752
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:5540
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2648
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3076
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2996
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:4572
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:672
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:896
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:5504
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3944
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:2480
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:4820
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:2240
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5060
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5236
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:864
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:756
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3816
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:956
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:3424
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:2980
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5864
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5488
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5720
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:1576
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:2396
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:1876
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3672
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2608
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3144
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2160
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:4892
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2288
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:6080
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3916
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:5380
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5016
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2852
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:1256
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:1644
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5456
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5068
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5524
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:4212
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:4424
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2244
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:4220
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2976
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5356
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5368
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5672
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:1052
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:5012
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:2228
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:2044
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:4652
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:5724
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3000
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5972
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3272
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:6000
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:2404
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:3356
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3712
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:2984
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3476
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:5384
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:2568
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:3216
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5668
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:3748
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:4500
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:4372
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:1368
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:1716
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:5136
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:1960
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:2320
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3116
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3396
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5268
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:4492
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:3516
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2416
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:1336
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:3412
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:4544
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:6012
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:5064
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5164
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2576
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3444
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2596
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3100
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:4496
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:2620
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:436
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:1872
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:3024
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:200
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5496
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:5936
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2624
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:3028
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:1440
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3452
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:1232
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:5872
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2756
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  - Delays execution with timeout.exe
  PID:2324
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:3076

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads