Analysis
- max time kernel
899s - max time network
465s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/09/2026, 23:08
Static task
static1
Behavioral task
behavioral1
Sample
MALWARETEST.bat
Resource
win10v2004-20260513-en
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
MALWARETEST.bat
Resource
win11ltsc2024-20260709-en
1 signatures
900 seconds
General
- Target MALWARETEST.bat
- Size 16KB
- Sample260910-24rj7sfa44
- SHA256 94253cf81f24719961fcda1e083138692046cbb1d72042b9a8e25c34d6ba2bcf
- MD5 1eec7cbac8d4e301a90543f2b99651ec
- SHA1 7dc4b185da5d1cc2e4d37acabbc356d621e5eff2
- SHA512 d4aec743f34927dd54d3b0c80607751a32eebbdef7a26d5c6a6ed13d645586c261d2ebaf7c4eca835ec40a545fbc5dde9a2bb86cddaa1cdf7c11c8ede837dcf0
- SSDEEP 384:Y2st7F2pM3ywcPNei4SEN9Cs2lUcbrDpI2r3v:Y2s8Iy3v
- TLSH T135722035312985643BFAEA4E491F4892F91035ABB5005D19B09FF1508FFD3C897F86BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 2960 cmd.exe
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\MALWARETEST.bat"1⤵
- Executes a command shell one-liner
PID:2960
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:2032
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:3940