67146fe3e4dd96e96c4caa03c1eac3d7f5d8706b327135a53d1549693141d261

Analysis

max time kernel
149s
max time network
156s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
07/08/2026, 01:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Applications/LUXONIX/Purity.app/Contents/MacOS/Purity
Size 92KB
Sample260807-b26cgavfnd
SHA256 67146fe3e4dd96e96c4caa03c1eac3d7f5d8706b327135a53d1549693141d261
MD5 6e885ef775b6fc5954a99668370d2c66
SHA1 13bb98ef8396cd88dd656634f74cf2be372e538e
SHA512 98ad9c9b70bae3e997a547b36159b13cd3467de0185d46b3c8e291bd1628996f7ff599ed81a964689f806cc50da76ef676c05e1f95e85b0623fe45917fab2acf
SSDEEP 1536:2tEPA20fAUZR2uBCD+AF3QNA66tJrrKHeru907AL8k2hvUwP2ZJBl2dZGNg2Tt0i:2tEPA20fAUZBCD+AF3QNA66tJTs8kWUt
TLSH
T13E93F803FF1D49B3CDE51BB5226B671B432FE98850228F46B704EE0D5FB32595C06AA9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3400	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Applications\LUXONIX\Purity.app\Contents\MacOS\Purity
1⤵
- Executes a command shell one-liner
PID:3400

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads