637aaf5c41abe0ef00af26386244575ce5c4b2588dfbb9b7fc8719ef3b289f00

Analysis

max time kernel
149s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/08/2026, 04:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
vehicles/A380-800/LUA/configurableElectrics.bat
Size 6KB
Sample260816-e8th2azdlg
SHA256 637aaf5c41abe0ef00af26386244575ce5c4b2588dfbb9b7fc8719ef3b289f00
MD5 0df498c5cde7c2b00f6d0336a0ea9a44
SHA1 b048a1952bf0668e36568e8941240e5af2b6e1fb
SHA512 d988f8a25e75a68d0ba54ba6d0991ce10c02db62e82d99e44ffd8d0a143daa183eea615ee65fbbd692b4c605321e5562dabf20211d216305719777773b1ec4a0
SSDEEP 192:RvtuVLPjEb1XPFlhHRjD7gUgeRVuNINLsZAX0CHY6:ZtuVz81XNldRjD0UgeRVGULGAXd46
TLSH
T1C9D1E02E750B61B4983F26B7D89B1150F93223693119109774BD80603E786BCDBD7B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2344	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\vehicles\A380-800\LUA\configurableElectrics.bat"
1⤵
- Executes a command shell one-liner
PID:2344

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads