5aba6ec903f2e0e946459f98dc45c8129d3f22187f5adac00713d733191d3a3f

Analysis

max time kernel
8s
max time network
20s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 23:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
main.exe
Size 101KB
Sample260802-3d9tjaywcy
SHA256 5aba6ec903f2e0e946459f98dc45c8129d3f22187f5adac00713d733191d3a3f
MD5 04a6848457a5f80d41295c11b475b879
SHA1 028fb30a4649b238b6a55ac61c55565c9d0a9c70
SHA512 e6bf99e393276260fc1f8b2ff32c646b50ec57b906f9f12993ea38938df91a244378e066519c5dcceecd1869ec9cf3ced63da0783b1d2e7243221ef164bafd55
SSDEEP 1536:Uj2XKbuEYE+9z2wp+FavGmhMn+IhzZtz0/gZRL7Sy9xo:USXKbuAs0FNmhMn+IhNO/gZRLu
TLSH
T100A3E44A6A4F8590C5748471037B47F65B2D2F22AAC3C68DA7C17F16EA7C281F909B73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3164	cmd.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3576 wrote to memory of 3164	3576	main.exe	90

C:\Users\Admin\AppData\Local\Temp\main.exe
"C:\Users\Admin\AppData\Local\Temp\main.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3576
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  - Executes a command shell one-liner
  PID:3164

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads