cd003c3743dfbf377ea8451277253bfae6d0ac0a0271e0b8eeefd8d74c084681

Analysis

max time kernel
148s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/09/2026, 16:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118__9dc44598680a2a553d0c8c4bad0674e5.lnk
Size 698B
Sample260919-thdr8aha43
SHA256 cd003c3743dfbf377ea8451277253bfae6d0ac0a0271e0b8eeefd8d74c084681
MD5 9dc44598680a2a553d0c8c4bad0674e5
SHA1 0ceea83fbb4d7b314014a8bb21dd299b934a8e8e
SHA512 7604ef5803b7192a97939c0d6d86dee1dfe5f197d0c2272f7da72fefed8129d3a4015752211cb41e5a7cf341962ef85411b604e93ad235b38705eae55389d494
TLSH
T1BA01C62817F90542E769E73345C48FD6FB2554517A444D4B14C3164A0D2F3179C54F7F
MD5 SHA1 SHA512 TLSH

Score

3^/10

execution

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
5100	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\jaffacakes118__9dc44598680a2a553d0c8c4bad0674e5.lnk
1⤵
- Executes a command shell one-liner
PID:5100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads