355970e2ef80c64b610d966140d2e44702457fa113d01835f9ce40ffbbb4fa50

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/09/2026, 16:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118__9f556cbc9fecd1d014394a31617bb87c.bat
Size 60B
Sample260919-t2bf7stbla
SHA256 355970e2ef80c64b610d966140d2e44702457fa113d01835f9ce40ffbbb4fa50
MD5 9f556cbc9fecd1d014394a31617bb87c
SHA1 ac9b87b0ce6bd244ef5cb556d888a30277adf3c0
SHA512 488cd72cf0a252e64aff9a8069ff38708d08d0b646a94d391bc3caaf1acf85cca2fc170ca63e75778f3882710b2bb16df4bdbbd497e7111e815247f8a9173344
TLSH
T17CA002BB34460BA41319D5E848205F271852C487244158D4377D645562D75485E2AF2E
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4292	cmd.exe

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\jaffacakes118__9f556cbc9fecd1d014394a31617bb87c.bat"
1⤵
- Executes a command shell one-liner
PID:4292

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads