2e6e629aa8d552b1b220b1f3571b51f45c9b195b0f79e41ee4952d84da9537a3

Resubmissions

13/09/2026, 12:26

260913-pmpm3ayxcs

13/09/2026, 12:24

13/09/2026, 12:22

13/09/2026, 12:22

13/09/2026, 12:21

11/08/2025, 20:38

11/08/2025, 20:37

Analysis

max time kernel
899s
max time network
471s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 12:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Installer/Terminal
Size 864B
Sample260913-pj95laxaje
SHA256 2e6e629aa8d552b1b220b1f3571b51f45c9b195b0f79e41ee4952d84da9537a3
MD5 102c7dddaa839c6052333cb206b769fc
SHA1 0e94e6ff7c3481ea0116aebe81080fde711ed6ed
SHA512 df0a7840d239d445898d0c5446d2735841308ccb7048fece5269c39f416513da741fb183ad2d3f78eb45ccf72cfb1fadef4404c32b29edbec2fc4344344621e6
TLSH
T12C11AC08BFE4CD13D55A173919838BF53B31C05CA7C55753226547A86E023EB4FA4AB8
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4156	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Installer\Terminal
1⤵
- Executes a command shell one-liner
PID:4156

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:6076

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:4092

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads