2cbfbdedea322c45abcc341493f66c099128b97e4d11c8eb729dc6d02bc23b3b

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 00:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ntlmv1-multi-master/grr/4a
Size 83KB
Sample260819-atfleavydz
SHA256 2cbfbdedea322c45abcc341493f66c099128b97e4d11c8eb729dc6d02bc23b3b
MD5 e11dd9f0731ad0fc7f8ae4fa3490d0d1
SHA1 f24a40c068a719b6710399af79a9242c0fddc456
SHA512 0beb6b36b18e42fcd19c97fb2b851577d531f9821767a5790081a3cfaec5419600cd6134cbe8a6cd017f3808c6f5f735049dee394343cc263af677aec848c903
SSDEEP 1536:jx6D8FdhvqCVplagXYDnGhdy52bxXDNWeB:jx6DCHvqCVplaRnGvzXD8O
TLSH
T1998373B7214E22F5A64EE3270674199F0223EC6F2709F7DE28F4687984E5B43951CCE6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4212	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\ntlmv1-multi-master\grr\4a
1⤵
- Executes a command shell one-liner
PID:4212

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads