91ca7d462bda0494660146223a5240937ed0f3b970869d3af6921f0d7572397c

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/08/2026, 00:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ntlmv1-multi-master/grr/5a
Size 693KB
Sample260819-atfleavydz
SHA256 91ca7d462bda0494660146223a5240937ed0f3b970869d3af6921f0d7572397c
MD5 2d13593896b5b3c9b8208b2c066a7b7a
SHA1 9af2eef2e92092a8d59b713aac0d5014532a6a2a
SHA512 be67a73e34c30bd2219b815dcae1b18d5652e6e9dbe65951fe2964ab5cc70c33c17975b5f3b98681e4912701a7fb7dd99fdd7ff76e09580d379dffd93bd3a354
SSDEEP 12288:UKbadQCrQ1ikS7SSzHsICvtYuoATqoUU2G/jZ6ErHF350TIVRvrWvZX+06CpadqS:UKOdQCrQckS7SSzHPCvtYufqoUU2G/j7
TLSH
T1A6E48463218E22BA9355F63E1AF4A91F4A03E82F0F18F6DC3CE054751697B4B851CDE6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2844	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\ntlmv1-multi-master\grr\5a
1⤵
- Executes a command shell one-liner
PID:2844

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads