76a97c878c9c7a8321bb395c2b44d3fe2f8d81314d219b20138ed0e2dddd5182

Analysis

max time kernel
150s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/07/2026, 11:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SoftHub/LICENSE
Size 33KB
Sample260721-ntldjset6k
SHA256 76a97c878c9c7a8321bb395c2b44d3fe2f8d81314d219b20138ed0e2dddd5182
MD5 3e00ca6129dc8358315015204ab9fe15
SHA1 5835213bd72873e87ee97e546d023ca970bf8c08
SHA512 3a02a6ec14e9d076b79aea8301eab31053c6600b68dcfa6261e10edaa7296a87c8767e35f2411d234b90111fcaf6b4a55c49aa2790a1a0d015213218bb7549fc
SSDEEP 384:ZuvgUu2qVTfofITuM2Vs6aHGUa1lufWkGVBmnLRfCiR1XAnLuaa9f/d5zgUaGhqU:Zqk3LTB2VsrHG/OfvMmnBCtLmJYR74
TLSH
T1F2F2845FB74413B2028206626A8B68DEE31DD03A776640A5785DC15C27B3E3583BFBED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2352	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\SoftHub\LICENSE
1⤵
- Executes a command shell one-liner
PID:2352

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads