c59ebda10097a3fbc4ca8238aa7209dc671b05a1e766ca6d8068815883e7f433

Analysis

max time kernel
149s
max time network
225s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/08/2026, 00:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
The Binding of Isaac Repentance [PPSA03311](axekin.com)/resources/gfx/ui/stage/convert.bat
Size 163B
Sample260801-afqjfstdla
SHA256 c59ebda10097a3fbc4ca8238aa7209dc671b05a1e766ca6d8068815883e7f433
MD5 ec27f9e119b9f0a97c1570614e71c41f
SHA1 57694b1791917dd4dad6d23938c4bc08143c8796
SHA512 e36c9650f6849400cd0d24cd361ec87318f2ea54753c6e98c55d8663f5bda6550270c1f8f21706990ddf3913e64cb5384085bd9ff4ca6db11ec1678f703e756c
TLSH
T1EEC080054CD5155337430442E7263C2CA557B4378A1596479288DAA4DDD5115D6775C0
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2448	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\The Binding of Isaac Repentance [PPSA03311](axekin.com)\resources\gfx\ui\stage\convert.bat"
1⤵
- Executes a command shell one-liner
PID:2448

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads