88dd22f564d77f6e55fadb696aa3a878357fd21d98260e23e8131be7f1a768a1

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/07/2026, 13:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
perl-5.44.0-RC2/Cross/Makefile.SH.bat
Size 6KB
Sample260720-qckrssdt3x
SHA256 88dd22f564d77f6e55fadb696aa3a878357fd21d98260e23e8131be7f1a768a1
MD5 c1947b2d0b02cce493dcc750c055b3df
SHA1 361b7156a0e1e7bdad29d3688d41fdb48fd0cac5
SHA512 b6cdc1db8e55cf663fc91c98b9911edabe0cbb035f1e2556658eb3c4518b3052812e83e993a76353e096facf9ed4b81288ef24ffb8a56bfa1047e702df21dc40
SSDEEP 96:WXdOjVn8UtdlXlYdUYWY+JpCWL8vdypCWyOgqDGZd27y1uCdM1YZtX8sG4uFA06b:KSBd33SZdzMECFA36MutQ
TLSH
T198D1982F463FCDAE76911379D91C0186B30E6A377C538B5AFCE96D588C09D5C81A3631
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
640	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\perl-5.44.0-RC2\Cross\Makefile.SH.bat"
1⤵
- Executes a command shell one-liner
PID:640

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads