debb4f80f2f86fb5c22a2458660f619cbf975de3ee0b97b9628945a588e0e50d

Analysis

user interaction
yes
max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 13:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
aisF290.bat
Size 364B
Sample260730-ratscszamd
SHA256 debb4f80f2f86fb5c22a2458660f619cbf975de3ee0b97b9628945a588e0e50d
MD5 c98f1c11833dd23c5f6ff6d5f72bafbe
SHA1 d97ec2d934c64e81f826db4fee3b122e1953154a
SHA512 99efa7a084c5595e01a8b70a396659d4da7701ce24f739573545b35f14f71dd4fcaf85ed17e90bf3f72e2f1cbdeca25ff987caf6c80e8ed897d7cd16cd943940
TLSH
T163E0265924E8E200D3FBAF182EF9213306FCB4B44C3E550D00C08A0C0880D04CE1179B
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3444	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\aisF290.bat"
1⤵
- Executes a command shell one-liner
PID:3444

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads