fa7d5552751bf0f1991f8e0cff2f0b7d7e64a7da38fafe78914b955de4573b9e

Analysis

max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/08/2026, 04:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
vehicles/A380-800/LUA/controller/A380-800_cuntroller.bat
Size 16KB
Sample260816-e8th2azdlg
SHA256 fa7d5552751bf0f1991f8e0cff2f0b7d7e64a7da38fafe78914b955de4573b9e
MD5 6880f7bc7e38f74bfc0a4957741ce5ed
SHA1 7586b939c25020b9ef012c2eaee4837f4e429321
SHA512 1c35010c23da0968f4cb1ef0731754019afe19fdc7fdc5c61c4d28b0cfc5685d642220b52cae803bf34bf4fe8efb66f40ddfccdb6c16d458f87bfdb2f5f00cde
SSDEEP 384:ZtwHccMffXKj3RCBtPYVmr9BCRAE6T39YtCRYTwUTQToBplSicH:ZuccMffXo3RCBqVmOA55KdUkBqZ
TLSH
T1AD72FF36F146113559FDEB3AE88A5985EBB9011B112A58B036CC41543FB8E0CF3F6A7E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3956	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\vehicles\A380-800\LUA\controller\A380-800_cuntroller.bat"
1⤵
- Executes a command shell one-liner
PID:3956

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads