b6facda159f4993ed9f700fc7e8e3b068bae3732fcadf4ca4879b4e0acc32ab0

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 00:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ntlmv1-multi-master/grr/2a
Size 1.8MB
Sample260819-atfleavydz
SHA256 b6facda159f4993ed9f700fc7e8e3b068bae3732fcadf4ca4879b4e0acc32ab0
MD5 5863d43bfea498279a6f256ba6025f15
SHA1 179a743ce85fd175621e9958091c87b781dcb89f
SHA512 152db8b25756a8eab21bd0455d8e9dab321d06166c3424d178dbf3826b9915d0e6e830a20ee26082ea2c29b440473448dc627df0fa125176d713955f3eed362b
SSDEEP 49152:i091W9NfyUqBtjWk0agzGRkX9+uYSPMiMYQk+F4CaF+h1Ae8A3ra7er/Cf/1Lkcs:i0bW95yUqBtjWk0agzGRkX9SSPMiMYQv
TLSH
T1F795C6B32B4756CEE20AF05E9BF6D64D82175D1F8F12B6C84CE670726067283DA1F198
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2580	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\ntlmv1-multi-master\grr\2a
1⤵
- Executes a command shell one-liner
PID:2580

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads