3f18e7b824a69fd55065d2ec85c5f9fc6f67add22be60d933bc5e56cd5a11761

Analysis

max time kernel
29s
max time network
34s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 01:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
assets/minecraft/.packsmc/conversion_id
Size 32B
Sample260808-cdsbdaz1e1
SHA256 3f18e7b824a69fd55065d2ec85c5f9fc6f67add22be60d933bc5e56cd5a11761
MD5 31b4c257aa734e28ea5f8c7e32d2950f
SHA1 e994c2b9d494d53c56523305dc7594327ba9a95a
SHA512 3515de776397aca0292553ebea15414157666275fba7b64d36397443546b6c5035a3e5289cd231ad0dad27782b96f6c92216e5359f2aa27437913660612d70d2
MD5 SHA1 SHA512

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4392	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\assets\minecraft\.packsmc\conversion_id
1⤵
- Executes a command shell one-liner
PID:4392

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads