8052d098bbab721fe8fce68d6bdd6bf252f74a57ca29f4809ba0ca0d0ff8832b

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
run.bat
Size 39B
Sample260802-phyp6shh56
SHA256 8052d098bbab721fe8fce68d6bdd6bf252f74a57ca29f4809ba0ca0d0ff8832b
MD5 77bc1dea017eba3ce4bb0361d5d0c9c8
SHA1 c265932ab8c26eebf2d72bfd76ff138d0706b4f5
SHA512 c13f6949b7d6beb1e70a979e9bc74f26771bfc870fa07bdbc520aeff39fa677528b6c4482f62d4655f895ec62e32e39ce7be82d519f329c9a36ce58fbeb791d3
MD5 SHA1 SHA512

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3188	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\run.bat"
1⤵
- Executes a command shell one-liner
PID:3188

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads