48ac7cfa451e9e7e23a987b495a45e026322047fcc7db9c273ff38e4c030f37f

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 16:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
RunApp.bat
Size 284B
Sample260718-t3mkvsfx8p
SHA256 48ac7cfa451e9e7e23a987b495a45e026322047fcc7db9c273ff38e4c030f37f
MD5 e0af156b3fa5e4337a9efc52ed546cf6
SHA1 cf1ab467a724c9c116bdbdb9817acb9db3e95fad
SHA512 d706839ee5c647993ab57ed99908b4b159e77d87ac9c40798a59a517a87152bbb0a34373b2ef87237310fc63efa1d9d8bdfb39199c7394ecf7ad5fa5e1de5c34
TLSH
T169D02B19225AA276B47223D5C77D2023B593E08B24177C28F0E7419C4B5F9E276EA2B7
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4228	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\RunApp.bat"
1⤵
- Executes a command shell one-liner
PID:4228

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads