bc3c1a89f168ea8fa21a7e176a4d765e86667ab738dcb754279f680a5c0dbf2e

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 00:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ntlmv1-multi-master/grr/3a
Size 188KB
Sample260819-atfleavydz
SHA256 bc3c1a89f168ea8fa21a7e176a4d765e86667ab738dcb754279f680a5c0dbf2e
MD5 8c5ad4ffd990f78b0ca309b07df99921
SHA1 511756cdf16e1c272746438ad0a440d40717f446
SHA512 e01d5ea0f670093c2f08b97693e36b827d24549b3267998dc22d3c0de07fe84f3d1414fdd00bb235c523932381caee97e879b923590f55875b1e8ba2c1c10ac7
SSDEEP 3072:QCwNM7CJ1KO1QPdqfPqmwv7yDfG3cNk7Ls9s8ORsDG4Lorz094QarUjgYk:fqM781KrPdCym/DfGMNk7LiFORKG4wUU
TLSH
T18F14C877208E71F1A7CAF72B1778176B46338C3F0B1BB68E38E855640556E4A8A1CDD2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4900	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\ntlmv1-multi-master\grr\3a
1⤵
- Executes a command shell one-liner
PID:4900

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads