Resubmissions
29/07/2026, 15:16
260729-snvr9aae39329/07/2026, 15:16
260729-snvr9aae3829/07/2026, 15:06
260729-sgqjyswfke8Analysis
- max time kernel
899s - max time network
464s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/07/2026, 15:16
Static task
static1
Behavioral task
behavioral1
Sample
f473474711885867b6c6b98c2076f99dd284afffe90b2db861d35c47669e1170
Resource
win10v2004-20260513-en
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
f473474711885867b6c6b98c2076f99dd284afffe90b2db861d35c47669e1170
Resource
win11ltsc2024-20260709-en
1 signatures
900 seconds
General
- Target f473474711885867b6c6b98c2076f99dd284afffe90b2db861d35c47669e1170
- Size 932KB
- Sample260729-snvr9aae39
- SHA256 5c0aaabe6d721ace9e1f3a4207e2d415b2b106f97d43d0d37ead6bcaad9d6ab0
- MD5 1b1fe88a11b84ed06ee2cb48fda1053e
- SHA1 18d8a52c7ee9483bf4bdbbf3fbaeb501a140c8cc
- SHA512 a65eb3475ccedf10284b51e8cbf78c7b79801a73a37fe9813294cbeee00e2a1d60909faf74e4cedfa3aed83274da6173829f5b489a3c6166eb7ffec9fb974292
- SSDEEP 12288:f1/aGLDCMNpNAkoSzZWD8ayX2MQCw7D0FoWxJpcEi0/3IWV//7cSdb94VIfYvEDs:f1/aGLDCM4D8ayGMZo8/aV4iZ
- TLSH T14B154B6337870CA5C59F3FB8918BFA35A7308D154B1B975AA2148967DEE33C4BCA9301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 4808 cmd.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\f473474711885867b6c6b98c2076f99dd284afffe90b2db861d35c47669e11701⤵
- Executes a command shell one-liner
PID:4808
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:1880
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:3100