bba78e2752030b85064ece0401e4c05e536ae59cfefc876a6454d36f80e3326a

Analysis

max time kernel
298s
max time network
296s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/08/2026, 19:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
res/share/batch/bat/Add to brotli.bat
Size 44B
Sample260818-yclyvsba29
SHA256 bba78e2752030b85064ece0401e4c05e536ae59cfefc876a6454d36f80e3326a
MD5 3a448456f8e22474bc1b25f3d7f2bda5
SHA1 510567ced05899b9e7dfdf72cfc15d06f8a5cc7c
SHA512 520d385c1cb1e4645a3bc66dcab213931fdbb3ba747c5509b8bccef8681324820d635fa915eaf65a7057c2d21ef9129c05183ca93f44a954ed1ca2f7f89c7371
MD5 SHA1 SHA512

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
1016	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\res\share\batch\bat\Add to brotli.bat"
1⤵
- Executes a command shell one-liner
PID:1016

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads