Analysis
- user interaction
yes - max time kernel
56s - max time network
71s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
10/08/2026, 19:57
General
- Target Misty UPDATED/misty/ext/zstd/common/xxhash.bat
- Size 256KB
- Sample260810-ypme6axblb
- SHA256 03ff121c55204311e5fe7bfa260d96ec67ccdb71867fb29d3ca252d3609c6f2c
Score
3/10
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Misty UPDATED\misty\ext\zstd\common\xxhash.bat"1⤵
- Executes a command shell one-liner
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵