e1fda5cd157464dc5589620178da805892bcadb8576c0488085cf5f899b82442

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 12:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
KrakenVanillaPlus/KrakenDualSpec.bat
Size 20KB
Sample260910-prjmlsgh73
SHA256 e1fda5cd157464dc5589620178da805892bcadb8576c0488085cf5f899b82442
MD5 0bfbf48c7fdbb1a1247a45ca4401ae53
SHA1 0e888f23b2929449002ff9b8b668888f1036509f
SHA512 d5d125e36b2c9c7649fbb98dff4241923b914ee9634217eaaaf26943acebab6641d5acf3c7a33f8c11851738b75a896f2ce3e8080dd1e51b2fdc970dcd816f90
SSDEEP 384:pTZ9yppqkePfvmvSDSSfHoF9QTy+TLlqXsOysZRTkxKh4FI0XE7aIGEm/eY6SSu5:pTZ9yppqkePHmvwSSfHoF9QTy+TLlqXS
TLSH
T12892111B214321B4CBC371998DA7B5417EA8246F918E21F4F85D10DABFA067E92F379C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4204	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\KrakenVanillaPlus\KrakenDualSpec.bat"
1⤵
- Executes a command shell one-liner
PID:4204

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads