aba75bd844a12f924cc06e130204f4a68f2af0b476edd6d6c8122fec0d42584c

Analysis

max time kernel
148s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 18:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
shaders/d3d/sm30/build.bat
Size 1KB
Sample260816-w2n4eavvbs
SHA256 aba75bd844a12f924cc06e130204f4a68f2af0b476edd6d6c8122fec0d42584c
MD5 79542d03896ea8c1bb9cf1df373b6e0c
SHA1 cb780b2817d346f5002493b57544f6297ff1ae0c
SHA512 002af62bf57dffa1c2b0b2bcff0470d691ade337208e564d20201c04b2155c525459a2f3f95121461d3ef5679027f6b1148d713a4455cba8d8ca7b50c08288f2
TLSH
T1CD310B9FA454DC4C6F2B60E7A93E64B755C2F53E3510D363777201E650A1BACE4002EC
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
5784	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\shaders\d3d\sm30\build.bat"
1⤵
- Executes a command shell one-liner
PID:5784

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads