97b2a194946bb34af56102c5ee0c8fd7cec636935f3451afe3d7d8af31ed4197

Resubmissions

18/07/2026, 05:31

260718-f7z5vsht6r8

18/07/2026, 05:09

260718-ftft3acv4w3

Analysis

max time kernel
149s
max time network
172s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/07/2026, 05:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Common/res/TitleUpdate/GameRules/BuildOnly/BuildAll.cmd
Size 257B
Sample260718-ftft3acv4w
SHA256 97b2a194946bb34af56102c5ee0c8fd7cec636935f3451afe3d7d8af31ed4197
MD5 23a5f3906e3ee8322199a0f26e7c3bde
SHA1 0afcef4e2c0c0ef728bdb34496d29e403af095a3
SHA512 905f76ec2a76deaf9421cdb3f3691bedf3e92f516c3cc4e9b08257cb196fcc32009e5ca898b3f9e70a16228e07d63ed8acfb99bc0eeaf66ebf5e1c3b2fd49951
TLSH
T1A0D0CB3FB0294926782027EAD16552C1C401D4BD2614D9C59E5C444DBBBEF9E0636907
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
1656	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Common\res\TitleUpdate\GameRules\BuildOnly\BuildAll.cmd"
1⤵
- Executes a command shell one-liner
PID:1656

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Tutorial_Windows64.pck

Path C:\Users\Admin\AppData\Local\Temp\Common\res\TitleUpdate\GameRules\Tutorial_Windows64.pck
Size 97KB
SHA256 169c3a510df1c03bb5cc2684fbdf2805886f967fc997c23013f43b5bf5c5698d
MD5 d0f9a154e8d0eaed249dca93642a97f4
SHA1 2cfa9e0e3a46bee7c2d734c30246738bd47c7cf6
SHA512 3c87cca53f15a82901f6d41b497d1501f1ac50d5986adc8a805b9381f5787663859e8671c66f88538d0ed0f70bc82c08cc1b9fb635a07bf669ca0c69b2a5f6f5
SSDEEP 3072:A78AyeXDEu/BitJHq5QQzd5NWzIxz+8udvXWnB:+FZT8tJRQzdV5udvXmB
TLSH
T195A3020AA75EA714D2A07A75B76B98043145DCA340360B6406A73275EF0A64FFE2D3FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download