Analysis
- user interaction
yes - max time kernel
149s - max time network
154s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
02/06/2026, 17:47
Static task
static1
Behavioral task
behavioral1
Sample
triagevirus.bat
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
triagevirus.bat
Resource
win11-20260513-en
0 signatures
150 seconds
General
- Target triagevirus.bat
- Size 1KB
- Sample260602-wdb4yaby2s
- SHA256 c9a20525fe86ce67713e3704563168304ab93e4b45ac6e90b021a7683dff27e3
- MD5 1d54c571c6d00f86fdc8d6ab63bf620d
- SHA1 42301a37390604973cb0a4e85dfcb14afa9294aa
- SHA512 ad8e6a6d6a93bc83ee51bf7d36850c06d01ed721e771356d6999b91aaa622582dc782ebc1f0873e610b3395796f39d4fbcb62a66458dd641600a1daec035ae70
- TLSH T1E721F24BB0FD31516211E58AAE9D908FBE222C27DA903D1430F3933978F27625B68CC7
- MD5 SHA1 SHA512 TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\triagevirus.bat"1⤵PID:5176
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1068