4faec29845ba9dce3a554700e5d28d301ad08b2a4586ea2bbf4d70571383f04f

Analysis

max time kernel
150s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/08/2026, 16:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
install.bat
Size 673B
Sample260805-vg2nbscn2x
SHA256 4faec29845ba9dce3a554700e5d28d301ad08b2a4586ea2bbf4d70571383f04f
MD5 47f0f3699178d96092f77f93a428b8af
SHA1 121756f864181ac28e9e2b5973906c4ec510b8e4
SHA512 295c3373b0c2cc4aa5ffdeac9357c9d43d8d3df21a5c04b2be2744ddae642e12cfa778b6fdcd84feb2d85b3f93bc606f526777a921d132bae84b98b58bff5cd0
TLSH
T17A019E1F3148437735E5619EDC5E11653702220B02525C7DA4FF11686E06CE0BAF94DB
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
1372	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\install.bat"
1⤵
- Executes a command shell one-liner
PID:1372

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads