8e3e99970fb015d0723c0664711973e7e47ed0844707190c4224b07c2a36bd6c

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 00:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ntlmv1-multi-master/grr/1a
Size 164KB
Sample260819-atfleavydz
SHA256 8e3e99970fb015d0723c0664711973e7e47ed0844707190c4224b07c2a36bd6c
MD5 97b2f81a050ed2808f8a2d4ae707d958
SHA1 250a2088d9365d3166eef03ee8d82e2738164e41
SHA512 fb6411bb24ef780b24f4897efa087c781a6e0bbeab510c7c95a9766fb9ec9566b0ddb0d1580aaab95e852a24a88c47158bef1a0440c77b9c9161c1ddb5b2de6a
SSDEEP 3072:lBmDyhNjSO4jdnDzAZdeAYZ1tsjBiPD6SkOiXe:lUOeddArI1t2BWiu
TLSH
T1FCF3B83B218E35F5978AE76B47205B6F42A7887F070CFB5D38F4A9584982A43D90CDE1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4784	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\ntlmv1-multi-master\grr\1a
1⤵
- Executes a command shell one-liner
PID:4784

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads