8df3f1d1d8e983c46966a406e617bb8efc9a84ae13c74b42fba557e8370641de

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 05:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
run.bat
Size 75B
Sample260809-fsn42st1ft
SHA256 8df3f1d1d8e983c46966a406e617bb8efc9a84ae13c74b42fba557e8370641de
MD5 d01a29b86841f3a56412291f6bc2d221
SHA1 00074ae38826aff9529fd9b7888c992a33991682
SHA512 f16718da1fb73b31662a8a9896bcb4ba3697d08f3af38ee198b2129194e0bff7317b36229f4a5cfbe818428e5ecb491062927cadde1f0e123b039708957d4866
TLSH
T15EA022F2032C80C822323C0B20CA00E0222E3CE3B0CAF20228B2320BBE0B2830C03303
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
5496	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\run.bat"
1⤵
- Executes a command shell one-liner
PID:5496

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads