5e23509c8272bd080a1fd4ed157aaf73c4666cd2718fdd7b5b4a2f1380a640e7

Analysis

max time kernel
898s
max time network
669s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/07/2026, 08:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment-3
Size 1KB
Sample260720-j4cryady3x
SHA256 5e23509c8272bd080a1fd4ed157aaf73c4666cd2718fdd7b5b4a2f1380a640e7
MD5 10613ca8142fcf03bc8825b4b9289174
SHA1 bad2cd35871f5c92b999ee0cf65f872c7c1a6be2
SHA512 89ed58c6c0b6c3b8feaacea9b2fa6b055ecf0d3b669d827a4da783cde42cb405511e3787bd878cb3b4ad3fbd7d37b91e8123b97833d27000f02e22a9ef015ee7
TLSH
T1FA31538B75E403AB83C7DA6C3864B378F57E24DEACC8D95C600176220491C1CD27BC19
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2768	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\attachment-3
1⤵
- Executes a command shell one-liner
PID:2768

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads