eba8f059508104e1fc7bf9407e3f7eba159dc9097fcb8570500c2d75b7c959ff

Analysis

max time kernel
150s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/08/2026, 00:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
WonderSTC.exe
Size 1.2MB
Sample260817-althaszekf
SHA256 eba8f059508104e1fc7bf9407e3f7eba159dc9097fcb8570500c2d75b7c959ff
MD5 047a465c111359fd52eccb2e10d5a29b
SHA1 175d7ab7b9910993c54b3a8015b1f362eb673690
SHA512 6964d711c6cf9f53cb97f8984409463fee528ad8ce4de745da91c8b2d2cddc24b7d194ae692c654a8994b9a2217558ebd85f6d82bdb5acf5fa697b0a3a7bc331
SSDEEP 12288:kgQly18C/XGhPJYmUwoRkUV5LtYzpPlvbiFnAb:k9y18CqP2mBobydlDiFnU
TLSH
T1B5453856E64548AAC453423445E2E23BEB3E3C741722839B26ED7D733EB2ED17DA1342
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
5412	cmd.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 1908 wrote to memory of 5412	1908	WonderSTC.exe	89

C:\Users\Admin\AppData\Local\Temp\WonderSTC.exe
"C:\Users\Admin\AppData\Local\Temp\WonderSTC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1908
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c pause
  2⤵
  - Executes a command shell one-liner
  PID:5412

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads