1f4d23fbb6f4a479c1e6c925e6d82ab274dc654ec1e0c81aac1b2ee12412d0ed

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
max time kernel
72s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-es
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-eslocale:es-esos:windows11-ltsc_2024-x64systemwindows
submitted
16/09/2026, 12:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
5ynZn
Size 17B
Sample260916-p3112aba56
SHA256 1f4d23fbb6f4a479c1e6c925e6d82ab274dc654ec1e0c81aac1b2ee12412d0ed
MD5 028637872ae8e76512364747948fcd5d
SHA1 42bc54912422feba4b15a329aa0bf72cda7a20a7
SHA512 ec154642d7981514959587ebad378f8d832d5f31096dffa6328f2d6bba5c2830160d51843c650694ebfd42aa8bf0c2cb19d44c6770181507cffec92a33f04728
MD5 SHA1 SHA512

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3164	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\5ynZn
1⤵
- Executes a command shell one-liner
PID:3164

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads