3ce14bbce42e339769dae4ec3ffd8b5150884e159366fbb88699203e76048664

Analysis

geolocation tags

asiadelhiinindia
max time kernel
148s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/08/2026, 00:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
install.bat
Size 715B
Sample260801-affz1stdkb
SHA256 3ce14bbce42e339769dae4ec3ffd8b5150884e159366fbb88699203e76048664
MD5 14741a4d4fb83a66aad98699db84cf7f
SHA1 6b4c747e267a5a67cbedf5daa67b017adf6eacef
SHA512 e28b4309bd985aa7f4ef497ba4ebbe70d4b5914eea0b8e14b8ccc396c08e4060a760e689f533234575998d4abe9af20fd44bdd2e5a87bfd374f2b9c82cdbbac3
TLSH
T138013A4F0034D2F7FD5D9774860342D4E76616E1B639349632DF58F8042BC18A613353
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
5476	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\install.bat"
1⤵
- Executes a command shell one-liner
PID:5476

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads