27e2932e1e5ea7169000b2a540790b29dff3f84aeb0a4e8bf66824fff569c213

Analysis

max time kernel
149s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/09/2026, 22:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
27e2932e1e5ea7169000b2a540790b29dff3f84aeb0a4e8bf66824fff569c213
Size 228KB
Sample260916-2qlrsswerd
SHA256 27e2932e1e5ea7169000b2a540790b29dff3f84aeb0a4e8bf66824fff569c213
MD5 56f7afb599614e15850bce1b6fea03bd
SHA1 18421ffc0eb7379e426f11a176db5189eb8b70d6
SHA512 5938c47c62c7d654ac8a1858d67a431a65cbc8ace26c56297e2397f1bcc67fdd6be54ccd72d79325dab5878257e61f86d6476084c720f02f7659784a81433d7e
SSDEEP 3072:LqyuUZgCs3yclUaOQ8IrNpuLdtciZhxHDBKKlYapLzsqqp:IUZzs3RuIp4LdtcerjBKKmale
TLSH
T114346C416B0C9D01C6D2E9BCFDEB8F617213766CC32145DA5126025EEC8AFD4F8A97B2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
536	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\27e2932e1e5ea7169000b2a540790b29dff3f84aeb0a4e8bf66824fff569c213
1⤵
- Executes a command shell one-liner
PID:536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads