ec52824b902445313ecd0b395cf28c4be2d4ac3bbdab94af6954012b67d104e0

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 23:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Network Persistent State
Size 7KB
Sample260809-21dtyazzcv
SHA256 ec52824b902445313ecd0b395cf28c4be2d4ac3bbdab94af6954012b67d104e0
MD5 471ba48dd8242f165efdfcef5f94ed58
SHA1 05aadc4b1456631b3ebb08f32453301273c6135c
SHA512 dddfca727e5c163b229ba5a15ba1ab74a4d13fdc86a9de057c88a704512fba82fc3ecbbe5a401e0b09bd81737338de12aeaefe443c4b9ab481f24f73854e65cf
SSDEEP 192:DVJge5yBEJJaI4E8mvIHI3VqsNPtaPuxfPIv0NeHa4joxe:DVJgQyBEJJaI4E8mvIHI3VqsNFaWxfAr
TLSH
T182F19AF7C3E8852DC91156F4AB25AE1FCE690A14531C3C26C9D5AF0B93E2872E351B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3452	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Network Persistent State"
1⤵
- Executes a command shell one-liner
PID:3452

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads