55e875d93dc1ce77f0c601adb4bb54b6245fab91e4efefcf378a8d10581bd16c

Analysis

max time kernel
30s
max time network
27s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/08/2026, 22:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Languages/Polish.bat
Size 95KB
Sample260813-2wtplahk21
SHA256 55e875d93dc1ce77f0c601adb4bb54b6245fab91e4efefcf378a8d10581bd16c
MD5 079af1ee086d3ebaeac615a318830ce7
SHA1 38394ed365ae15ef96b4dfb8840cc15c5ea5afc7
SHA512 f08ac2d3a33a1c104f82accbb84230589f2b4cee38aa8fc7397ffa903878326a140b94a4542f1b4f027f313322dac0aec3bf1a30fca821e1cde04158f6eb4d7b
SSDEEP 1536:+5ejBksB4yCC98Bz2bAUVc5N1BbDU80+ZtK51+KRQtxhN5jko2Mq9PkriZTUrXtZ:72yAUVcDPU80+ZtK51+P1L7O934rr3
TLSH
T1BEA34C0DC2C2835A07F3018BEEC71996FB7D849C565B034AA8AF411D75819ADC3BF9E8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4308	cmd.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4308 wrote to memory of 2976	4308	cmd.exe	90

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Languages\Polish.bat"
1⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
PID:4308
- C:\Windows\system32\help.exe
  Help =Pomoc
  2⤵
  PID:2976

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads