34e5bc4e15a496eccc181f62ab230916cd085d3064965976a16c7b356731feb1

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 20:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
OpenTabletDriver-0.6.7_win-x64/convert_to_portable.bat
Size 610B
Sample260729-ys13qaeb35
SHA256 34e5bc4e15a496eccc181f62ab230916cd085d3064965976a16c7b356731feb1
MD5 a3c83f9801b8a493e360682112fd6ad0
SHA1 50635f0293ceb2174b00bc2d09109d06702da715
SHA512 6fe51d57327eff0a02e404b90de907f81f20645ca792e3ded89753329113f0fa1cf5f31611cbdbb3b07a1777d471fb49fb23e5512a9e66dfdc6a1887930ca23d
TLSH
T1CFF0AC763F193AAC2BFD820601022118F50C6047072609B7B43291AA5F6C977A9BAEF8
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4520	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\OpenTabletDriver-0.6.7_win-x64\convert_to_portable.bat"
1⤵
- Executes a command shell one-liner
PID:4520

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads