9d972adc4d437ec9aa7bcf56406ebee995cc13ebdd340416979dea12cd6c5996

Resubmissions

20/08/2026, 04:29

260820-e4k14aem9z8

20/08/2026, 04:26

260820-e2mrxaem9y3

19/08/2026, 10:52

260819-myrwfshp2v3

Analysis

max time kernel
148s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 04:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Run Me!.bat
Size 1KB
Sample260820-e2mrxaem9y
SHA256 9d972adc4d437ec9aa7bcf56406ebee995cc13ebdd340416979dea12cd6c5996
MD5 4a8e330a7926c762d6d0baa760bc7394
SHA1 c9e508afb6620419ea8e1bd8e2a3b0e1056000ab
SHA512 b2800d82f969f6c65869401de4422a44c2c4341fbe388bc3f9430e1ab38999478d96ba5c359bd428b823ff1614c93f0aaeb3d45cf1fdbc7caa0417a5a2125a33
TLSH
T1B8315B7A7ACC69D3099D40085B5EC6903026434F7940FFAC115A993FA97DBCD1DFD444
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3632	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Run Me!.bat"
1⤵
- Executes a command shell one-liner
PID:3632

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads