0d3db5e1aab568de8e9150da2b6c22ab73c4075baad2d9a871aa01ef15cf06d1

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/07/2026, 22:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Roblox-Hacker-Edition.bat
Size 2KB
Sample260728-2c59aaar4y
SHA256 0d3db5e1aab568de8e9150da2b6c22ab73c4075baad2d9a871aa01ef15cf06d1
MD5 5323707f112930fab9c8fbb2cc147966
SHA1 3151f8ea57a145d0ea7aaa2768b92d5a8e1a5dd4
SHA512 c5de411b99bbe00e219d718c2290ee81e452bd17f19e47c3d56e141ba2a6f595c16188d4689cbd7345c81da85b43a905cf41bf55131ced69fb37ae4946976632
TLSH
T10241BF393905C4210E76B9F29F13E1EDF658118FC314093D36AFC2A46F3759292E5AE6
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2420	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Roblox-Hacker-Edition.bat"
1⤵
- Executes a command shell one-liner
PID:2420

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads