Analysis
- max time kernel
899s - max time network
463s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/09/2026, 22:52
Static task
static1
Behavioral task
behavioral1
Sample
MALWARETEST.bat
Resource
win10v2004-20260513-en
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
MALWARETEST.bat
Resource
win11ltsc2024-20260709-en
1 signatures
900 seconds
General
- Target MALWARETEST.bat
- Size 16KB
- Sample260910-2tpmvsxbna
- SHA256 37a62de3d2a1f7df1c86372ea71ae7921681eb7192e73499bdd3e5235b964625
- MD5 9e62c4633b57ea043882d9a76eb91e80
- SHA1 e3fee7398ee0500ca65aa6a5053bd3ad1c5bfbdf
- SHA512 a0d210df7792da7c637aaa4aba6bd82d9f8a03addb523be91ff91299250745111952dacafe5ce431cecadb0342100e9880a8bfe5f509ee11d0f81461949e482a
- SSDEEP 192:UhwYlgDCypWHHEi37bd9D4yaK2yOIm0ldb/Wl94sFGIF:Uu4gOypW9fd9bpmDG6
- TLSH T1B372DF757046686473E1E58D9D3A0A62B21174DBF7052818F0AF70A48BEDFAC73FA538
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 4300 cmd.exe
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\MALWARETEST.bat"1⤵
- Executes a command shell one-liner
PID:4300
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:2700
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:5908