d1d356e2d55b441c18c28fe2de4be23fee343c4e1357bb9bb07491f88bf32e6c

Analysis

max time kernel
239s
max time network
241s
platform
windows10-2004_x64
resource
win10v2004-20260513-es
resource tags

arch:x64arch:x86image:win10v2004-20260513-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
04/09/2026, 21:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
USBASP_write_0x44.cmd
Size 172B
Sample260904-1ect3s1cnd
SHA256 d1d356e2d55b441c18c28fe2de4be23fee343c4e1357bb9bb07491f88bf32e6c
MD5 87c885191b91e7226df1d49fbb27ef14
SHA1 431e6a02a53dc712b320dd26b7b6fa13f9177905
SHA512 4ee2df802f78b811ac912414d1b0f73a1a41d7b48a9de3bfdceea284ec3bd2dc03bc2cc130fe58d0cf1b0424bc0542b996118016ebecc4a1e79244b11afd6a6d
TLSH
T176C080E44D5111BC4C0540430953FC99D45BC201577B1D55F8500D55F47D4C9EF30C34
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
1068	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\USBASP_write_0x44.cmd"
1⤵
- Executes a command shell one-liner
PID:1068

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads