Analysis
- max time kernel
149s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
16/09/2026, 07:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
606cd0a5bceffd9da23149189bbf8dd8fb32fc41ca99c51beb1f23ffebfad9b8.sys
Resource
win10v2004-20260911-en
1 signatures
150 seconds
General
- Target 606cd0a5bceffd9da23149189bbf8dd8fb32fc41ca99c51beb1f23ffebfad9b8.sys
- Size 15KB
- Sample260916-jllbcsvvhs
- SHA256 606cd0a5bceffd9da23149189bbf8dd8fb32fc41ca99c51beb1f23ffebfad9b8
- MD5 8656c161fc1abafd9a8c4b656073d04a
- SHA1 8c6e8454600536c49439d949ddf966478bd78219
- SHA512 c16d81b45d61cc822f61244bcbebedb54050301740b6cdb35ce9ca549098b4136d39318428a595b0068e2bb24476f672ae55850f92eeda06d426df1b37ab59de
- SSDEEP 192:iJoG7gcWP84PqvWFgRdfPVmi3uACZq3mp1Soff7GzzUukW:iJoyg704PLgDFj3RCZ7Eof7IUuJ
- TLSH T11E62FA5AB6910AF2CC1846B9C1F34913D7F574802B3646EF50E448121FBAFCA9A39B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 5680 cmd.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\606cd0a5bceffd9da23149189bbf8dd8fb32fc41ca99c51beb1f23ffebfad9b8.sys1⤵
- Executes a command shell one-liner
PID:5680 -
C:\Users\Admin\AppData\Local\Temp\606cd0a5bceffd9da23149189bbf8dd8fb32fc41ca99c51beb1f23ffebfad9b8.sysC:\Users\Admin\AppData\Local\Temp\606cd0a5bceffd9da23149189bbf8dd8fb32fc41ca99c51beb1f23ffebfad9b8.sys2⤵PID:5852
-